feat(profile): update cups-browsed

apparmor.d/groups/cups/cups-browsed

@@ -7,7 +7,7 @@ abi <abi/4.0>,
 include <tunables/global>
 
 @{exec_path} = @{sbin}/cups-browsed
-profile cups-browsed @{exec_path} {
+profile cups-browsed @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/bus-system>
   include <abstractions/bus/org.freedesktop.NetworkManager>
@@ -18,9 +18,8 @@ profile cups-browsed @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/p11-kit>
 
-#   capability net_admin,
+  capability net_admin,
   capability net_bind_service,
-#   capability sys_nice,
 
   network inet dgram,
   network inet6 dgram,
@@ -28,20 +27,12 @@ profile cups-browsed @{exec_path} {
   network inet6 stream,
   network netlink raw,
 
-  dbus receive bus=system path=/
-       interface=org.freedesktop.Avahi.Server
-       member=StateChanged
-       peer=(name=:*, label="@{p_avahi_daemon}"),
+  #aa:dbus talk bus=system name=org.cups.cupsd.Notifier  label=cups-notifier-dbus
 
   dbus receive bus=system path=/org/freedesktop/NetworkManager
        interface=org.freedesktop.NetworkManager
        member=CheckPermissions
-       peer=(name=:*, label=NetworkManager),
-
-  dbus receive bus=system path=/org/cups/cupsd/Notifier
-       interface=org.cups.cupsd.Notifier
-       member={PrinterDeleted,PrinterStopped}
-       peer=(name=@{busname}, label=cups-notifier-dbus),
+       peer=(name=@{busname}, label=NetworkManager),
 
   @{exec_path} mr,
 
@@ -59,7 +50,7 @@ profile cups-browsed @{exec_path} {
   owner @{tmp}/@{hex} rw,
 
   @{run}/cups/certs/* r,
-  @{run}/avahi-daemon/socket rw, # TODO: in abs 'avahi' ?
+  @{run}/avahi-daemon/socket rw,
 
   @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,