feat(profiles): move some flags definition in main.flags

apparmor.d/groups/avahi/avahi-autoipd

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}{s,}bin/avahi-autoipd
-profile avahi-autoipd @{exec_path} flags=(complain) {
+profile avahi-autoipd @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 

apparmor.d/groups/avahi/avahi-browse

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/avahi-browse /{usr/,}bin/avahi-browse-domains
-profile avahi-browse @{exec_path} flags=(complain) {
+profile avahi-browse @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/dbus-strict>

apparmor.d/groups/avahi/avahi-daemon

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/avahi-daemon
-profile avahi-daemon @{exec_path} flags=(complain) {
+profile avahi-daemon @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 

apparmor.d/groups/avahi/avahi-publish

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/avahi-publish /{usr/,}bin/avahi-publish-address /{usr/,}bin/avahi-publish-service
-profile avahi-publish @{exec_path} flags=(complain) {
+profile avahi-publish @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 

apparmor.d/groups/avahi/avahi-resolve

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/avahi-resolve /{usr/,}bin/avahi-resolve-address /{usr/,}bin/avahi-resolve-host-name
-profile avahi-resolve @{exec_path} flags=(complain) {
+profile avahi-resolve @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/dbus-strict>

apparmor.d/groups/avahi/avahi-set-host-name

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/avahi-set-host-name
-profile avahi-set-host-name @{exec_path} flags=(complain) {
+profile avahi-set-host-name @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 

apparmor.d/groups/systemd/systemd-machined

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}lib/systemd/systemd-machined
-profile systemd-machined @{exec_path} flags=(complain) {
+profile systemd-machined @{exec_path} {
   include <abstractions/base>
   include <abstractions/systemd-common>
 

apparmor.d/profiles-g-l/lvm

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}{s,}bin/lvm
-profile lvm @{exec_path} flags=(complain) {
+profile lvm @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/dbus-strict>

apparmor.d/profiles-g-l/lvmconfig

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}{s,}bin/lvmconfig
-profile lvmconfig @{exec_path} flags=(complain) {
+profile lvmconfig @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 

apparmor.d/profiles-g-l/lvmdump

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}{s,}bin/lvmdump
-profile lvmdump @{exec_path} flags=(complain) {
+profile lvmdump @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/disks-read>

apparmor.d/profiles-g-l/lvmpolld

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}{s,}bin/lvmpolld
-profile lvmpolld @{exec_path} flags=(complain) {
+profile lvmpolld @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>

dists/flags/main.flags

@@ -8,6 +8,12 @@ atd complain
 auditctl complain
 auditd attach_disconnected,complain
 augenrules complain
+avahi-autoipd complain
+avahi-browse complain
+avahi-daemon complain
+avahi-publish complain
+avahi-resolve complain
+avahi-set-host-name complain
 busctl complain
 cfdisk complain
 cgdisk complain
@@ -21,6 +27,7 @@ cockpit-ssh complain
 cockpit-tls complain
 cockpit-ws complain
 cockpit-wsinstance-factory complain
+containerd-shim-runc-v2 attach_disconnected,complain
 cups-backend-beh complain
 cups-backend-brf complain
 cups-backend-dnssd complain
@@ -37,6 +44,7 @@ cups-browsed complain
 cups-pk-helper-mechanism complain
 cupsd attach_disconnected,complain
 dkms attach_disconnected,complain
+docker attach_disconnected,complain
 downloadhelper complain
 e2fsck complain
 etckeeper complain
@@ -58,6 +66,7 @@ glib-compile-resources complain
 glib-genmarshal complain
 glib-gettextize complain
 glib-mkenums complain
+gnome-browser-connector-host complain
 gnome-control-center attach_disconnected,complain
 gnome-control-center-goa-helper complain
 gnome-disk-image-mounter complain
@@ -102,6 +111,10 @@ locale-gen complain
 localectl complain
 login complain
 loginctl complain
+lvm complain
+lvmconfig complain
+lvmdump complain
+lvmpolld complain
 lvmpolld complain
 machinectl complain
 man complain
@@ -130,6 +143,7 @@ pinentry-gtk-2 complain
 pkttyagent complain
 plymouth complain
 plymouth-set-default-theme complain
+plymouthd complain
 podman attach_disconnected,complain
 power-profiles-daemon attach_disconnected,complain
 prime-switch complain
@@ -250,6 +264,8 @@ userdbctl complain
 virt-manager attach_disconnected,complain
 virtiofsd complain
 virtlockd complain
+wg complain
+wg-quick complain
 xdg-dbus-proxy attach_disconnected,complain
 xdg-desktop-icon complain
 xdg-desktop-portal attach_disconnected,complain