feat(profiles): general update. See #101

apparmor.d/profiles-m-r/pkexec

@@ -72,5 +72,8 @@ profile pkexec @{exec_path} flags=(complain) {
   owner /dev/tty[0-9]* rw,
   owner @{HOME}/.xsession-errors w,
 
+  # Silencer
+  deny @{user_share_dirs}/gvfs-metadata/* r,
+
   include if exists <local/pkexec>
 }

apparmor.d/profiles-m-r/power-profiles-daemon

@@ -45,16 +45,19 @@ profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) {
   /var/lib/power-profiles-daemon/{,**} rw,
 
   @{sys}/bus/ r,
+  @{sys}/bus/platform/devices/ r,
   @{sys}/class/ r,
   @{sys}/class/power_supply/ r,
   @{sys}/devices/**/power_supply/*/scope r,
   @{sys}/devices/**/power_supply/*/uevent r,
   @{sys}/devices/system/cpu/*_pstate/{no_turbo,turbo_pct} r,
   @{sys}/devices/system/cpu/*_pstate/status r,
+  @{sys}/devices/system/cpu/cpu[0-9]*/power/energy_perf_bias rw,
   @{sys}/devices/system/cpu/cpufreq/ r,
   @{sys}/devices/system/cpu/cpufreq/policy[0-9]*/energy_performance_preference rw,
   @{sys}/devices/system/cpu/cpufreq/policy[0-9]*/scaling_governor rw,
-  @{sys}/devices/system/cpu/cpu[0-9]*/power/energy_perf_bias rw,
+  @{sys}/firmware/acpi/platform_profile* r,
+  @{sys}/firmware/acpi/pm_profile* r,
 
   include if exists <local/power-profiles-daemon>
 }

apparmor.d/profiles-m-r/run-parts

@@ -20,7 +20,7 @@ profile run-parts @{exec_path} {
 
   # Crontrab
   /etc/cron.{hourly,daily,weekly,monthly}/                     r,
-  /etc/cron.{hourly,daily,weekly,monthly}/0anacron             rPx,
+  /etc/cron.{hourly,daily,weekly,monthly}/0anacron            rPUx,
   /etc/cron.{hourly,daily,weekly,monthly}/apport               rPx,
   /etc/cron.{hourly,daily,weekly,monthly}/apt-compat           rPx,
   /etc/cron.{hourly,daily,weekly,monthly}/apt-listbugs         rPx,