feat(profile): general update.

apparmor.d/profiles-s-z/spice-vdagent

@@ -36,8 +36,6 @@ profile spice-vdagent @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
-  /var/lib/nscd/passwd r,
-
   owner @{desktop_config_dirs}/user-dirs.dirs r,
   owner @{user_config_dirs}/user-dirs.dirs r,
 
@@ -45,5 +43,7 @@ profile spice-vdagent @{exec_path} flags=(attach_disconnected) {
 
   owner @{PROC}/@{pids}/task/@{tid}/comm rw,
 
+  owner /dev/tty@{int} rw,
+
   include if exists <local/spice-vdagent>
 }

apparmor.d/profiles-s-z/umount

@@ -20,16 +20,19 @@ profile umount @{exec_path} {
   capability setuid,
   capability sys_admin,
 
-  umount,
-
   network inet stream,
   network inet6 stream,
 
+  umount,
+
   @{exec_path} mr,
 
   @{bin}/umount.*  rPx,
   @{bin}/mount.*   rPx,
 
+  /etc/mtab r,
+  /etc/fstab r,
+
   # Mount points
   @{HOME}/ r,
   @{HOME}/*/ r,
@@ -38,15 +41,10 @@ profile umount @{exec_path} {
   @{MOUNTS}/*/ r,
   @{MOUNTS}/*/*/ r,
 
-  /media/cdrom[0-9]/ r,
-
-  /etc/mtab r,
-  /etc/fstab r,
-
-  owner @{PROC}/@{pid}/mountinfo r,
-
   owner @{run}/mount/ rw,
   owner @{run}/mount/utab{,.*} rwk,
 
+  owner @{PROC}/@{pid}/mountinfo r,
+
   include if exists <local/umount>
 }