feat(profiles): general update.

apparmor.d/profiles-a-f/auditctl

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/auditctl
-profile auditctl @{exec_path} {
+profile auditctl @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
 
   capability audit_control,

apparmor.d/profiles-a-f/augenrules

@@ -7,22 +7,23 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/augenrules
-profile augenrules @{exec_path} {
+profile augenrules @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
 
   @{exec_path} mr,
 
-  @{bin}/auditctl  rPx,
-  @{bin}/cat       rix,
-  @{bin}/chmod     rix,
-  @{bin}/cmp       rix,
-  @{bin}/cp        rix,
-  @{bin}/{,g,m}awk rix,
-  @{bin}/{,e,f}grep rix,
-  @{bin}/ls        rix,
-  @{bin}/mktemp    rix,
-  @{bin}/rm        rix,
+  @{bin}/{,ba,da}sh  rix,
+  @{bin}/{,e,f}grep  rix,
+  @{bin}/{,g,m}awk   rix,
+  @{bin}/auditctl    rPx,
+  @{bin}/cat         rix,
+  @{bin}/chmod       rix,
+  @{bin}/cmp         rix,
+  @{bin}/cp          rix,
+  @{bin}/ls          rix,
+  @{bin}/mktemp      rix,
+  @{bin}/rm          rix,
 
   /etc/audit/audit.rules rw,
   /etc/audit/rules.d/{,*} r,

apparmor.d/profiles-a-f/fprintd

@@ -13,6 +13,7 @@ profile fprintd @{exec_path} flags=(attach_disconnected) {
   include <abstractions/devices-usb>
   include <abstractions/nameservice-strict>
 
+  capability net_admin,
   capability sys_nice,
 
   network netlink raw,

apparmor.d/profiles-a-f/fwupd

@@ -21,6 +21,7 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
   capability dac_read_search,
   capability linux_immutable,
   capability mknod,
+  capability net_admin,
   capability sys_admin,
   capability sys_nice,
   capability sys_rawio,