feat(fsp): remove the now deprecated generic system service profiles.

apparmor.d/groups/_full/systemd-service

@@ -1,77 +0,0 @@
-# apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
-# SPDX-License-Identifier: GPL-2.0-only
-
-# Profile for generic systemd unit services. Only used by tiny systemd services
-# that start a shell or use context specific programs.
-
-# It does not specify an attachment path because it is intended to be used only
-# via "Px -> systemd-service" exec transitions from the systemd profile.
-
-abi <abi/4.0>,
-
-include <tunables/global>
-
-profile systemd-service flags=(attach_disconnected) {
-  include <abstractions/base>
-  include <abstractions/consoles>
-  include <abstractions/nameservice-strict>
-
-  capability dac_read_search,
-  capability chown,
-  capability fsetid,
-
-  @{sbin}/ldconfig     rix,
-  @{bin}/savelog       rix,
-  @{bin}/systemctl     rix,
-  @{bin}/gzip          rix,
-  @{coreutils_path}    rix,
-  @{sh_path}          rmix,
-
-  # ifup@.service
-  @{bin}/ifup          rPx,
-
-  # shadow.service
-  @{sbin}/pwck         rPx,
-  @{sbin}/grpck        rPx,
-
-  @{bin}/grub-editenv  rPx,
-  @{bin}/ibus-daemon   rPx,
-
-  @{bin}/* r,
-  @{lib}/ r,
-
-  /var/cache/ldconfig/{,**} rw,
-
-  / r,
-
-  /boot/grub/grubenv rw,
-  /boot/grub/ w,
-
-  /var/spool/cron/atjobs/ r,
-
-  /var/log/ r,
-  /var/log/dmesg rw,
-  /var/log/dmesg.* rwl -> /var/log/dmesg,
-
-  # man-db.service
-  /usr/{,local/}share/man/{,**} r,
-  /etc/manpath.config r,
-  /var/cache/man/{,**} rwk,
-
-  # snapd.system-shutdown.service
-  @{run}/initramfs/shutdown rw,
-  @{run}/initramfs/ rw,
-
-  # cockpit.socket
-  @{run}/cockpit/@{rand8} rw,
-  @{run}/cockpit/motd w,
-
-  @{PROC}/cmdline r,
-  @{PROC}/sys/kernel/osrelease r,
-
-  include if exists <usr/systemd-service.d>
-  include if exists <local/systemd-service>
-}
-
-# vim:syntax=apparmor

apparmor.d/groups/_full/systemd-user-service

@@ -1,23 +0,0 @@
-# apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
-# SPDX-License-Identifier: GPL-2.0-only
-
-# Profile for generic systemd unit services. Only used by tiny systemd services
-# that start a shell or use context specific programs.
-
-# It does not specify an attachment path because it is intended to be used only
-# via "Px -> systemd-user-service" exec transitions from the systemd-user profile.
-
-abi <abi/4.0>,
-
-include <tunables/global>
-
-profile systemd-user-service flags=(attach_disconnected) {
-  include <abstractions/base>
-  include <abstractions/consoles>
-
-  include if exists <usr/systemd-user-service.d>
-  include if exists <local/systemd-user-service>
-}
-
-# vim:syntax=apparmor

dists/flags/main.flags

@@ -2,7 +2,6 @@
 # File format: one profile by line using the format: '<profile> <flags>'
 
 systemd attach_disconnected,mediate_deleted,complain
-systemd-service attach_disconnected,complain
 systemd-user attach_disconnected,mediate_deleted,complain
 
 akonadi_akonotes_resource complain