feat(profile): minor sshd improvement.

apparmor.d/groups/ssh/sshd-auth

@@ -24,6 +24,8 @@ profile sshd-auth @{exec_path} {
   @{exec_path} mr,
   @{sbin}/sshd.hmac r,
 
+  /etc/gss/mech.d/{,*} r,
+
   include if exists <local/sshd-auth>
 }
 

apparmor.d/groups/ssh/sshd-session

@@ -47,6 +47,11 @@ profile sshd-session @{exec_path} flags=(attach_disconnected) {
        member={CreateSession,ReleaseSession,CreateSessionWithPIDFD}
        peer=(name=org.freedesktop.login1, label="@{p_systemd_logind}"),
 
+  dbus send bus=system path=/org/freedesktop/home1
+       interface=org.freedesktop.home1.Manager
+       member=GetUserRecordByName
+       peer=(name=org.freedesktop.home1, label="@{p_systemd_homed}"),
+
   @{exec_path} mr,
 
   @{bin}/@{shells}                   Ux, #aa:exclude RBAC