feat(profile): general update.

apparmor.d/profiles-a-f/arduino

@@ -102,8 +102,8 @@ profile arduino @{exec_path} {
   @{sys}/class/tty/ r,
   @{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{idVendor,idProduct,manufacturer,serial,product} r,
 
-  /dev/ttyS[0-9]* rw,
-  /dev/ttyACM[0-9]* rw,
+  /dev/ttyS@{int} rw,
+  /dev/ttyACM@{int} rw,
 
   # Silencer
   deny /usr/share/arduino/** w,

apparmor.d/profiles-a-f/cups-backend-serial

@@ -14,5 +14,7 @@ profile cups-backend-serial @{exec_path} {
 
   /etc/papersize r,
 
+  /dev/ttyS@{int} w,
+
   include if exists <local/cups-backend-serial>
 }

apparmor.d/profiles-a-f/cups-backend-snmp

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{lib}/cups/backend/snmp
 profile cups-backend-snmp @{exec_path} {
   include <abstractions/base>
+  include <abstractions/nameservice-strict>
 
   network inet dgram,
   network inet6 dgram,

apparmor.d/profiles-a-f/cupsd

@@ -66,7 +66,7 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
   @{lib}/cups/driver/*       rix,
   @{lib}/cups/filter/*       rix,
   @{lib}/cups/monitor/*      rix,
-  @{lib}/cups/notifier/*     rix,
+  @{lib}/cups/notifier/*     rPx,
 
   /usr/share/cups/{,**} r,
   /usr/share/ghostscript/{,**} r,

apparmor.d/profiles-a-f/fritzing

@@ -63,8 +63,8 @@ profile fritzing @{exec_path} {
   @{run}/udev/data/c5:@{int}   r,         # for /dev/tty, /dev/console, /dev/ptmx
   @{run}/udev/data/c166:[0-9]* r,         # for /dev/ttyACM[0-9]*
 
-  /dev/ttyS[0-9]* rw,
-  /dev/ttyACM[0-9]* rw,
+  /dev/ttyS@{int} rw,
+  /dev/ttyACM@{int} rw,
 
   owner @{run}/lock/LCK..ttyACM[0-9]* rwk,