feat(profiles): general update.

apparmor.d/groups/ubuntu/notify-reboot-required

@@ -12,7 +12,8 @@ profile notify-reboot-required @{exec_path} {
 
   @{exec_path} mr,
 
-  /{usr/,}bin/gettext rix,
+  /{usr/,}bin/{,ba,da}sh  rix,
+  /{usr/,}bin/gettext     rix,
 
   /usr/share/update-notifier/notify-reboot-required r,
 

apparmor.d/groups/ubuntu/packagekitd

@@ -46,7 +46,7 @@ profile packagekitd @{exec_path} {
 
   dbus receive bus=system path=/org/freedesktop/login[0-9]
        interface=org.freedesktop.login[0-9].Manager
-       member={SessionNew,PrepareForShutdown},
+       member={SessionNew,PrepareForShutdown,SessionRemoved},
 
   dbus bind bus=system 
        name=org.freedesktop.PackageKit,

apparmor.d/groups/ubuntu/software-properties-gtk

@@ -10,7 +10,9 @@ include <tunables/global>
 profile software-properties-gtk @{exec_path} {
   include <abstractions/base>
   include <abstractions/apt-common>
-  include <abstractions/python>
+  include <abstractions/dbus-session-strict>
+  include <abstractions/dbus-strict>
+  include <abstractions/dconf-write>
   include <abstractions/fonts>
   include <abstractions/openssl>
 
@@ -22,15 +24,25 @@ profile software-properties-gtk @{exec_path} {
   /{usr/,}bin/lsb_release              rPx -> lsb_release,
   /{usr/,}bin/ubuntu-advantage         rPx,
 
+  /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/icons/{,**} r,
+  /usr/share/mime/mime.cache r,
+  /usr/share/pixmaps/ r,
+  /usr/share/python-apt/{,**} r,
+  /usr/share/software-properties/{,**} r,
   /usr/share/ubuntu-drivers-common/detect/{,**} r,
+  /usr/share/X11/xkb/{,**} r,
+  /usr/share/xml/iso-codes/{,**} r,
 
   /etc/machine-id r,
-
-  owner @{PROC}/@{pid}/fd/ r,
+  /etc/update-manager/release-upgrades r,
 
   @{sys}/devices/ r,
   @{sys}/devices/**/ r,
+  @{sys}/devices/**/modalias r,
+
+  owner @{PROC}/@{pid}/fd/ r,
+  owner @{PROC}/@{pid}/mountinfo r,
 
   include if exists <local/software-properties-gtk>
 }

apparmor.d/groups/ubuntu/ubuntu-advantage

@@ -13,11 +13,22 @@ profile ubuntu-advantage @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/python>
   include <abstractions/ssl_certs> 
+  include <abstractions/openssl>
+
+  network inet stream,
+  network inet6 stream,
+  network inet dgram,
+  network inet6 dgram,
+  network netlink raw,
 
   @{exec_path} mr,
 
   /{usr/,}bin/dpkg                     rPx -> child-dpkg,
 
+  /etc/ubuntu-advantage/uaclient.conf r,
+
+  owner /tmp/tmp[0-9a-z]*/apt.conf r,
+
   owner @{PROC}/@{pid}/fd/ r,
 
   include if exists <local/ubuntu-advantage>

apparmor.d/groups/ubuntu/update-manager

@@ -28,6 +28,8 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
   network inet6 stream,
   network netlink raw,
 
+  signal (send) peer=apt-methods-http,
+
   dbus (send,receive) bus=system path=/org/debian/apt{,/transaction/*}
        interface={org.debian{,.apt*},org.freedesktop.DBus.{Introspectable,Properties}}
        member={CommitPackages,Run,PropertyChanged,Introspect,Set,GetAll,UpdateCache},
@@ -36,13 +38,13 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
        interface=org.freedesktop.DBus
        member=StartServiceByName,
 
-  dbus send bus=system path=/org/freedesktop/NetworkManager
-       interface=org.freedesktop.DBus.Introspectable
-       member=Introspect,
+  dbus send bus=system path=/org/freedesktop/NetworkManager{,/ActiveConnection/[0-9]*,/Devices/[0-9]*}
+       interface=org.freedesktop.DBus.{Properties,Introspectable}
+       member={Introspect,Get},
 
   dbus send bus=system path=/org/freedesktop/UPower
-       interface=org.freedesktop.DBus.Properties
-       member=Get,
+       interface=org.freedesktop.DBus.{Properties,Introspectable}
+       member={Get,Introspect},
 
   dbus send bus=system path=/org/freedesktop/login[0-9]
        interface=org.freedesktop.login[0-9].Manager