feat(profiles): general update.

apparmor.d/groups/apt/apt

@@ -33,6 +33,7 @@ profile apt @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/{,e}grep   rix,
   /{usr/,}bin/echo       rix,
   /{usr/,}bin/gdbus      rix,
+  /{usr/,}bin/ischroot   rix,
   /{usr/,}bin/test       rix,
   /{usr/,}bin/touch      rix,
 
@@ -49,7 +50,10 @@ profile apt @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/dpkg-source                     rcx -> dpkg-source,
   /{usr/,}bin/etckeeper                       rPx,
   /{usr/,}bin/ps                              rPx,
+  /{usr/,}bin/snap                           rPUx,
+  /{usr/,}lib/cnf-update-db                   rPx,
   /{usr/,}lib/needrestart/apt-pinvoke         rPx,
+  /{usr/,}lib/ubuntu-advantage/apt-esm-hook   rPx,
   /{usr/,}lib/update-notifier/update-motd-updates-available rPx,
   /usr/share/command-not-found/cnf-update-db  rPx,
 
@@ -81,6 +85,7 @@ profile apt @{exec_path} flags=(attach_disconnected) {
   /var/lib/dpkg/lock{,-frontend} rwk,
 
   owner @{PROC}/@{pid}/fd/ r,
+        @{PROC}/@{pids}/mountinfo r,
 
   /dev/ptmx rw,
 

apparmor.d/groups/apt/unattended-upgrade

@@ -37,6 +37,7 @@ profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/apt-listchanges          rPx,
   /{usr/,}bin/dpkg                     rPx,
   /{usr/,}bin/etckeeper                rPx,
+  /{usr/,}bin/ischroot                 rix,
   /{usr/,}bin/lsb_release              rPx -> lsb_release,
   /{usr/,}bin/python3.[0-9]*           rix,
   /{usr/,}bin/uname                    rix,

apparmor.d/groups/apt/unattended-upgrade-shutdown

@@ -14,6 +14,8 @@ profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  /{usr/,}bin/ischroot  rix,
+
   /usr/share/unattended-upgrades/{,*} r,
   /etc/apt/apt.conf.d/{,*} r,