feat(opensuse): final opensuse integration.

apparmor.d/groups/systemd/localectl

@@ -11,6 +11,8 @@ profile localectl @{exec_path} {
   include <abstractions/base>
   include <abstractions/systemd-common>
 
+  capability net_admin,
+
   @{exec_path} mr,
 
   /{usr/,}bin/less  rPx -> child-pager,

apparmor.d/groups/systemd/systemd-hostnamed

@@ -35,6 +35,12 @@ profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  /etc/.#hostname* rw,
+  /etc/.#machine-info?????? rw,
+  /etc/hostname rw,
+  /etc/machine-info rw,
+
+  @{run}/systemd/default-hostname rw,
   @{run}/systemd/notify rw,
   @{run}/udev/data/+dmi:id r,
 
@@ -46,15 +52,7 @@ profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {
   @{sys}/devices/virtual/dmi/id/product_version r,
   @{sys}/devices/virtual/dmi/id/sys_vendor r,
   @{sys}/devices/virtual/dmi/id/uevent r,
-
   @{sys}/firmware/dmi/entries/*/raw r,
 
-  /etc/.#hostname* rw,
-  /etc/.#machine-info?????? rw,
-  /etc/hostname rw,
-  /etc/machine-info rw,
-
-  @{run}/udev/data/+dmi:id r,
-
   include if exists <local/systemd-hostnamed>
 }

apparmor.d/groups/systemd/systemd-localed

@@ -31,6 +31,7 @@ profile systemd-localed @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  /usr/share/kbd/keymaps/{,**} r,
   /usr/share/systemd/language-fallback-map r,
   /usr/share/X11/xkb/rules/evdev r,
 

apparmor.d/groups/systemd/systemd-tmpfiles

@@ -19,6 +19,7 @@ profile systemd-tmpfiles @{exec_path} flags=(attach_disconnected) {
   capability fsetid,
   capability mknod,
   capability net_admin,
+  capability syslog,
 
   @{exec_path} mr,
 

apparmor.d/groups/systemd/systemd-xdg-autostart-generator

@@ -16,7 +16,7 @@ profile systemd-xdg-autostart-generator @{exec_path} {
 
   @{exec_path} mr,
 
-  /etc/xdg/autostart/{,*.desktop} r,
+  @{etc_ro}/xdg/autostart/{,*.desktop} r,
 
   owner @{user_config_dirs}/autostart/{,*.desktop} r,
   owner @{run}/user/@{uid}/systemd/generator.late/{,**} rw,