fix: small ci fixes.

Justfile

@@ -344,7 +344,7 @@ init:
 [group('tests')]
 [doc('Run the integration tests')]
 integration:
-	TERM=xterm bats --recursive --pretty --timing --print-output-on-failure tests/integration
+	bats --recursive --timing --print-output-on-failure tests/integration
 
 [group('tests')]
 [doc('Install dependencies for the integration tests (machine)')]

apparmor.d/groups/apt/dpkg-preconfigure

@@ -36,7 +36,7 @@ profile dpkg-preconfigure @{exec_path} {
   @{bin}/stty                  ix,
   @{bin}/tr                    ix,
   @{bin}/uniq                  ix,
-  @{bin}/which{,.debianutils}  ix,
+  @{bin}/which{,.debianutils} rix,
 
   @{bin}/apt-extracttemplates      Px,
   @{bin}/dpkg                      Px -> child-dpkg,

apparmor.d/groups/apt/dpkg-script-linux

@@ -43,6 +43,8 @@ profile dpkg-script-linux @{exec_path} {
     include <abstractions/base>
     include <abstractions/app/systemctl>
 
+    capability net_admin,
+
     include if exists <local/dpkg-script-linux_systemctl>
   }
 

apparmor.d/groups/apt/dpkg-scripts

@@ -62,10 +62,8 @@ profile dpkg-scripts @{exec_path} {
   @{bin}/ r,
   @{bin}/* w,
   @{lib}/ r,
-  @{lib}/@{python_name}/**/__pycache__/ w,
-  @{lib}/@{python_name}/**/__pycache__/**.pyc w,
-  @{lib}/@{python_name}/**/__pycache__/**.pyc.@{u64} w,
-  @{lib}/modules/*/.fresh-install w,
+  @{lib}/** w,
+  /opt/*/** rw,
 
   /etc/ r,
   /etc/** rw,

apparmor.d/profiles-g-l/gtk-update-icon-cache

@@ -12,6 +12,8 @@ profile gtk-update-icon-cache @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
 
+  capability fowner,
+
   @{exec_path} mr,
 
   @{system_share_dirs}/icons/{,**/} r,

apparmor.d/profiles-s-z/ucf

@@ -14,7 +14,7 @@ profile ucf @{exec_path} {
   include <abstractions/consoles>
   include <abstractions/perl>
 
-  @{exec_path} r,
+  @{exec_path}          rix,
   @{sh_path}            rix,
 
   @{bin}/{,e}grep       rix,

apparmor.d/profiles-s-z/ucfr

@@ -9,18 +9,19 @@ include <tunables/global>
 @{exec_path} = @{bin}/ucfr
 profile ucfr @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   @{exec_path} mr,
 
   @{sh_path}                     r,
-  @{bin}/basename               ix,
-  @{bin}/{m,g,}awk              ix,
-  @{bin}/getopt                 ix,
   @{bin}/{,e}grep               ix,
+  @{bin}/{m,g,}awk              ix,
+  @{bin}/basename               ix,
+  @{bin}/dirname                ix,
+  @{bin}/getopt                 ix,
   @{bin}/id                     ix,
   @{bin}/readlink               ix,
   @{bin}/sed                    ix,
-  @{bin}/dirname                ix,
 
   /usr/share/ucf/{,**} r,