From 3a90d82a1eb92d6f0b2eff48f00bf44b4875118c Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Thu, 2 May 2024 22:27:00 +0100
Subject: [PATCH] feat: remove the deprecated ucf profile.

---
 apparmor.d/profiles-s-z/ucf | 116 ------------------------------------
 1 file changed, 116 deletions(-)
 delete mode 100644 apparmor.d/profiles-s-z/ucf

diff --git a/apparmor.d/profiles-s-z/ucf b/apparmor.d/profiles-s-z/ucf
deleted file mode 100644
index 65ddef5e..00000000
--- a/apparmor.d/profiles-s-z/ucf
+++ /dev/null
@@ -1,116 +0,0 @@
-# apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2019-2022 Mikhail Morfikov
-# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
-# SPDX-License-Identifier: GPL-2.0-only
-
-abi <abi/3.0>,
-
-include <tunables/global>
-
-@{exec_path} = @{bin}/ucf
-profile ucf @{exec_path} flags=(complain) {
-  include <abstractions/base>
-  include <abstractions/consoles>
-
-  @{exec_path} r,
-  @{sh_path}            rix,
-
-  @{bin}/{,e}grep       rix,
-  @{bin}/basename       rix,
-  @{bin}/cat            rix,
-  @{bin}/cp             rix,
-  @{bin}/dirname        rix,
-  @{bin}/{m,g,}awk      rix,
-  @{bin}/getopt         rix,
-  @{bin}/id             rix,
-  @{bin}/md5sum         rix,
-  @{bin}/mkdir          rix,
-  @{bin}/mv             rix,
-  @{bin}/perl           rix,
-  @{bin}/readlink       rix,
-  @{bin}/rm             rix,
-  @{bin}/sed            rix,
-  @{bin}/seq            rix,
-  @{bin}/stat           rix,
-  @{bin}/tr             rix,
-  @{bin}/which{,.debianutils}          rix,
-
-  # Do not strip env to avoid errors like the following:
-  #  ERROR: ld.so: object 'libfakeroot-sysv.so' from LD_PRELOAD cannot be preloaded (cannot open
-  #  shared object file): ignored.
-  @{bin}/dpkg-query     rpx,
-  #
-  @{bin}/dpkg-divert    rPx,
-
-  @{bin}/sensible-pager rCx -> pager,
-
-  # Think what to do about this (#FIXME#)
-  /usr/share/debconf/frontend     rPx,
-  #/usr/share/debconf/frontend    rCx -> frontend,
-
-  /etc/ucf.conf r,
-  /var/lib/ucf/** rw,
-
-  owner @{tmp}/* rw,
-  /etc/default/* rw,
-
-  # For md5sum
-  /etc/** r,
-  /usr/share/** r,
-  @{run}/** r,
-
-  # For writing new config files
-  /etc/** rw,
-
-  /usr/share/debconf/confmodule r,
-
-  # For shell pwd
-  / r,
-  /root/ r,
-
-
-  profile pager flags=(complain) {
-    include <abstractions/base>
-    include <abstractions/consoles>
-
-    @{bin}/                r,
-    @{bin}/sensible-pager mr,
-
-    # For shell pwd
-    /root/ r,
-
-  }
-
-  profile frontend flags=(complain) {
-    include <abstractions/base>
-    include <abstractions/consoles>
-    include <abstractions/perl>
-    include <abstractions/nameservice-strict>
-
-    /usr/share/debconf/frontend r,
-    @{bin}/perl r,
-
-    @{bin}/ucf rPx,
-
-    @{sh_path}        rix,
-    @{bin}/stty       rix,
-    @{bin}/locale     rix,
-
-    /etc/debconf.conf r,
-    owner /var/cache/debconf/{config,passwords,templates}.dat{,-new,-old} rwk,
-
-    # The following is needed when debconf uses GUI frontends.
-    include <abstractions/gtk>
-    include <abstractions/fonts>
-    include <abstractions/fontconfig-cache-read>
-    include <abstractions/freedesktop.org>
-    capability dac_read_search,
-    @{bin}/lsb_release rPx -> lsb_release,
-    @{bin}/hostname    rix,
-    owner @{PROC}/@{pid}/mounts r,
-    @{HOME}/.Xauthority r,
-
-  }
-
-  include if exists <local/ucf>
-}