feat(profile): general update.

apparmor.d/groups/children/child-dpkg

@@ -43,7 +43,7 @@ profile child-dpkg {
   /var/lib/dpkg/tmp.ci/md5sums rw,
   /var/lib/dpkg/triggers/Lock rw,
   /var/lib/dpkg/updates/* rw,
-  /var/log/dpkg.log ra,
+  /var/log/dpkg.log rw,
 
   # file_inherit
   /tmp/#@{int} rw,

apparmor.d/groups/children/child-open

@@ -19,7 +19,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-profile child-open {
+profile child-open flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/app-open>
   include <abstractions/app/open>

apparmor.d/groups/children/child-open-browsers

@@ -15,7 +15,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-profile child-open-browsers {
+profile child-open-browsers flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/app/open>
 

apparmor.d/groups/children/child-pager

@@ -28,6 +28,8 @@ profile child-pager {
 
   @{system_share_dirs}/terminfo/{,**} r,
 
+  @{HOME}/.lesshst r,
+
   owner @{HOME}/ r,
   owner @{HOME}/.lesshs* rw,
   owner @{HOME}/.terminfo/@{int}/* r,