feat(dbus): add initial polkit abstraction.

apparmor.d/profiles-s-z/snapd

@@ -13,6 +13,7 @@ include <tunables/global>
 profile snapd @{exec_path} {
   include <abstractions/base>
   include <abstractions/authentication>
+  include <abstractions/bus/polkit>
   include <abstractions/dbus-strict>
   include <abstractions/disks-write>
   include <abstractions/fontconfig-cache-write>

apparmor.d/profiles-s-z/system-config-printer

@@ -11,6 +11,7 @@ include <tunables/global>
 @{exec_path} += /usr/share/system-config-printer/system-config-printer.py
 profile system-config-printer @{exec_path} flags=(complain) {
   include <abstractions/base>
+  include <abstractions/bus/polkit>
   include <abstractions/dbus-session-strict>
   include <abstractions/dbus-strict>
   include <abstractions/dconf-write>

apparmor.d/profiles-s-z/udisksd

@@ -10,6 +10,7 @@ include <tunables/global>
 @{exec_path} = @{lib}/{,udisks2/}udisksd
 profile udisksd @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/bus/polkit>
   include <abstractions/dbus-strict>
   include <abstractions/disks-write>
   include <abstractions/nameservice-strict>

apparmor.d/profiles-s-z/zsysd

@@ -9,16 +9,13 @@ include <tunables/global>
 @{exec_path} = @{bin}/zsysd @{bin}/zsysctl
 profile zsysd @{exec_path} flags=(complain) {
   include <abstractions/base>
+  include <abstractions/bus/polkit>
   include <abstractions/dbus-strict>
   include <abstractions/nameservice-strict>
 
   capability sys_ptrace,
   capability sys_admin,
 
-  dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
-       interface=org.freedesktop.PolicyKit1.Authority
-       member=CheckAuthorization,
-
   @{exec_path}                   rmix,
   /{usr/,}{local/,}{s,}bin/zfs   rPx,
   /{usr/,}{local/,}{s,}bin/zpool rPx,