feat(profiles): general update.

See #134

apparmor.d/profiles-a-f/aa-notify

@@ -13,6 +13,8 @@ profile aa-notify @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/python>
 
+  capability setgid,
+  capability setuid,
   capability sys_ptrace,
 
   ptrace (read),
@@ -24,10 +26,14 @@ profile aa-notify @{exec_path} {
   /etc/apparmor/*.conf r,
   /etc/inputrc r,
 
-  /usr/share/terminfo/x/xterm-256color r,
+  /usr/etc/inputrc.keys r,
   /usr/share/terminfo/d/dumb r,
+  /usr/share/terminfo/x/xterm r,
+  /usr/share/terminfo/x/xterm-256color r,
+
   /var/log/audit/audit.log r,
 
+  owner @{HOME}/.inputrc r,
   owner @{HOME}/.terminfo/[0-9]*/dumb r,
 
   owner /tmp/[a-z0-9]* rw,

apparmor.d/profiles-a-f/agetty

@@ -31,7 +31,9 @@ profile agetty @{exec_path} {
   /{etc,run,lib,usr/lib}/issue.d/{,*} r,
   /etc/inittab r,
   /etc/login.defs r,
+  /etc/login.defs.d/ r,
   /etc/os-release r,
+  /usr/etc/login.defs r,
 
         @{run}/resolvconf/resolv.conf r,
   owner @{run}/agetty.reload rw,

apparmor.d/profiles-a-f/augenrules

@@ -14,6 +14,7 @@ profile augenrules @{exec_path} {
   @{exec_path} mr,
 
   @{bin}/auditctl  rPx,
+  @{bin}/cat       rix,
   @{bin}/chmod     rix,
   @{bin}/cmp       rix,
   @{bin}/cp        rix,