From 266db5d030e2dd01608def50c5c983b47c221039 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 27 Aug 2023 15:50:51 +0100
Subject: [PATCH] chore: cosmetic.

---
 apparmor.d/profiles-m-r/nslookup          | 5 +++--
 apparmor.d/profiles-m-r/protonmail-bridge | 2 ++
 apparmor.d/profiles-s-z/slirp4netns       | 2 +-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/apparmor.d/profiles-m-r/nslookup b/apparmor.d/profiles-m-r/nslookup
index af9b1fc3..225a0c9a 100644
--- a/apparmor.d/profiles-m-r/nslookup
+++ b/apparmor.d/profiles-m-r/nslookup
@@ -1,16 +1,17 @@
 # apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = /{,usr/}bin/nslookup
+@{exec_path} = @{bin}/nslookup
 profile nslookup @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
-  include <abstractions/openssl>
   include <abstractions/nameservice-strict>
+  include <abstractions/openssl>
 
   network inet dgram,
   network inet6 dgram,
diff --git a/apparmor.d/profiles-m-r/protonmail-bridge b/apparmor.d/profiles-m-r/protonmail-bridge
index 00ad2fb6..eb897f54 100644
--- a/apparmor.d/profiles-m-r/protonmail-bridge
+++ b/apparmor.d/profiles-m-r/protonmail-bridge
@@ -2,6 +2,8 @@
 # Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
+# Warning: only the protonmail-bridge CLI and service are supported, NOT the GUI.
+
 abi <abi/3.0>,
 
 include <tunables/global>
diff --git a/apparmor.d/profiles-s-z/slirp4netns b/apparmor.d/profiles-s-z/slirp4netns
index 705a6e09..94dd1b3e 100644
--- a/apparmor.d/profiles-s-z/slirp4netns
+++ b/apparmor.d/profiles-s-z/slirp4netns
@@ -25,7 +25,7 @@ profile slirp4netns @{exec_path} flags=(attach_disconnected) {
 
   pivot_root /tmp/**,
   pivot_root /tmp/old/,
-  # pivot_root oldroot=/tmp/old/ -> /tmp/,
+  # pivot_root oldroot=/tmp/old/ -> /tmp/, TODO: not supported on Debian
 
   @{exec_path} mr,