feat(profile): modernize some profiles.

apparmor.d/profiles-a-f/acpi-powerbtn

@@ -21,7 +21,7 @@ profile acpi-powerbtn flags=(attach_disconnected) {
   @{bin}/shutdown     rix,
   /etc/acpi/powerbtn.sh    rix,
 
-  @{bin}/systemctl    rPx -> child-systemctl,
+  @{bin}/systemctl    rCx -> systemctl,
   @{bin}/ps           rPx,
 
   @{bin}/fgconsole    rCx,
@@ -46,5 +46,12 @@ profile acpi-powerbtn flags=(attach_disconnected) {
     owner /dev/tty@{int} rw,
   }
 
+  profile systemctl {
+    include <abstractions/base>
+    include <abstractions/systemctl>
+  
+    include if exists <local/acpi-powerbtn_systemctl>
+  }
+
   include if exists <local/acpi-powerbtn>
 }

apparmor.d/profiles-a-f/blueman

@@ -12,15 +12,12 @@ profile blueman @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/audio-client>
   include <abstractions/dconf-write>
+  include <abstractions/desktop>
   include <abstractions/fontconfig-cache-read>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
   include <abstractions/nameservice-strict>
   include <abstractions/python>
   include <abstractions/thumbnails-cache-read>
   include <abstractions/user-download-strict>
-  include <abstractions/wayland>
 
   network inet stream,
   network inet6 stream,
@@ -37,7 +34,6 @@ profile blueman @{exec_path} flags=(attach_disconnected) {
   @{open_path}         rPx -> child-open,
 
   /usr/share/blueman/{,**} r,
-  /usr/share/X11/xkb/{,**} r,
 
   /etc/machine-id r,
   /var/lib/dbus/machine-id r,
@@ -57,8 +53,6 @@ profile blueman @{exec_path} flags=(attach_disconnected) {
   owner @{user_cache_dirs}/obexd/ rw,
   owner @{user_cache_dirs}/obexd/* rw,
 
-  owner @{run}/user/@{uid}/gdm/Xauthority r,
-
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/mounts r,
         @{PROC}/@{pids}/cmdline r,

apparmor.d/profiles-a-f/dkms-autoinstaller

@@ -20,7 +20,7 @@ profile dkms-autoinstaller @{exec_path} {
   @{bin}/plymouth   rix,
   @{bin}/readlink   rix,
   @{bin}/run-parts  rCx -> run-parts,
-  @{bin}/systemctl  rPx -> child-systemctl,
+  @{bin}/systemctl  rCx -> systemctl,
   @{bin}/tput       rix,
 
   # For shell pwd
@@ -34,6 +34,14 @@ profile dkms-autoinstaller @{exec_path} {
 
     @{bin}/run-parts mr,
 
+    include if exists <local/dkms-autoinstaller_run-parts>
+  }
+
+  profile systemctl {
+    include <abstractions/base>
+    include <abstractions/systemctl>
+  
+    include if exists <local/dkms-autoinstaller_systemctl>
   }
 
   include if exists <local/dkms-autoinstaller>