Merge branch 'Updating-polkit,-sddm,-unix-chkpwd,btrfs' of https://github.com/curiosityseeker/apparmor.d into curiosityseeker-Updating-polkit,-sddm,-unix-chkpwd,btrfs

* 'Updating-polkit,-sddm,-unix-chkpwd,btrfs' of https://github.com/curiosityseeker/apparmor.d:
  Update login
  Update btrfs
  Update polkitd: @{PROC}/@{pid}/fdinfo/@{int}
  Update unix-chkpwd
  Update needrestart: adding unix_chkpwd
  Update sddm: adding unix_chkpwd

apparmor.d/groups/freedesktop/polkitd

@@ -58,6 +58,7 @@ profile polkitd @{exec_path} flags=(attach_disconnected) {
 
   @{PROC}/@{pids}/cgroup r,
   @{PROC}/@{pids}/cmdline r,
+  @{PROC}/@{pid}/fdinfo/@{int} r,
   @{PROC}/@{pids}/stat r,
   @{PROC}/@{pids}/task/@{tid}/stat r,
   @{PROC}/1/environ r,

apparmor.d/groups/kde/sddm

@@ -63,6 +63,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   @{bin}/tty           rix,
   @{bin}/xdm            r,
   @{bin}/xmodmap       rix,
+  @{bin}/unix_chkpwd   rPx,
 
   @{bin}/kwin_wayland rPUx,
   @{bin}/sddm-greeter rPx,

apparmor.d/profiles-a-f/btrfs

@@ -41,13 +41,18 @@ profile btrfs @{exec_path} flags=(attach_disconnected) {
 
   @{run}/blkid/blkid.tab{,-@{rand6}} rw,
   @{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
-
+  @{run}/snapper-tools-*/ r,
+  @{run}/snapper-tools-@{rand6}/@/.snapshots/@{int}/snapshot r,
+  
+  @{sys}/fs/btrfs/@{uuid}/exclusive_operation r,
   @{sys}/fs/btrfs/@{uuid}/devinfo/@{int}/fsid r,
+  @{sys}/fs/btrfs/@{uuid}/devinfo/@{int}/scrub_speed_max r,
 
         @{PROC}/partitions r,
   owner @{PROC}/@{pid}/mounts r,
 
   /dev/btrfs-control rw,
+  /dev/pts/@{int} rw,
   /dev/tty@{int} rw,
   
 

apparmor.d/profiles-g-l/login

@@ -38,6 +38,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mr,
 
   @{bin}/{,z,ba,da}sh  rUx,
+  @{bin}/unix_chkpwd rPx,
 
   @{etc_ro}/environment r,
   @{etc_ro}/security/limits.d/{,*} r,
@@ -55,7 +56,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
 
   owner @{user_cache_dirs}/motd.legal-displayed rw,
 
-  @{run}/motd.d/ r,
+  @{run}/motd.d/{,*} r,
   @{run}/dbus/system_bus_socket rw,
   @{run}/faillock/* rwk,
   @{run}/motd.dynamic{,.new} rw,

apparmor.d/profiles-m-r/needrestart

@@ -34,6 +34,7 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
   @{bin}/systemctl                         rPx -> child-systemctl,
   @{bin}/systemd-detect-virt               rPx,
   @{bin}/udevadm                           rPx,
+  @{bin}/unix_chkpwd                       rPx,
   @{bin}/whiptail                          rPx,
   @{bin}/who                               rix,
   @{lib}/needrestart/iucode-scan-versions  rPx,

apparmor.d/profiles-s-z/unix-chkpwd

@@ -21,5 +21,9 @@ profile unix-chkpwd @{exec_path} {
 
   /etc/shadow r,
 
+  # file_inherit
+        /dev/pts/@{int} rw,
+  owner /dev/tty@{int} rw,
+
   include if exists <local/unix-chkpwd>
 }