From c04c260cfadc78c503ccbd798aad988a4eb387ae Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sat, 10 Apr 2021 14:19:43 +0100
Subject: [PATCH] Enforce some profiles.

---
 apparmor.d/profiles-a-l/aa-notify |  2 +-
 profiles.manifest                 | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/apparmor.d/profiles-a-l/aa-notify b/apparmor.d/profiles-a-l/aa-notify
index 82001b15..9327024b 100644
--- a/apparmor.d/profiles-a-l/aa-notify
+++ b/apparmor.d/profiles-a-l/aa-notify
@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/aa-notify
-profile aa-notify @{exec_path} flags=(complain) {
+profile aa-notify @{exec_path} {
   include <abstractions/base>
   include <abstractions/python>
   include <abstractions/nameservice-strict>
diff --git a/profiles.manifest b/profiles.manifest
index 6f3f61c5..938334d3 100644
--- a/profiles.manifest
+++ b/profiles.manifest
@@ -2,7 +2,7 @@ aa-notify
 accounts-daemon
 acpi
 acpid attach_disconnected,complain
-adb complain
+adb
 adduser
 amixer
 arch-audit complain
@@ -15,7 +15,7 @@ blueman-rfcomm-watcher
 bluemoon
 bluetoothctl
 bluetoothd
-browserpass complain
+browserpass
 chage
 chfn
 child-lsb_release
@@ -81,11 +81,11 @@ gnome-session-binary attach_disconnected,complain
 gnome-session-ctl complain
 gnome-shell attach_disconnected,complain
 gnome-shell-calendar-server complain
-goa-daemon complain
-goa-identity-service complain
+goa-daemon
+goa-identity-service
 gpasswd
-gpg-agent complain
-gpg-connect-agent complain
+gpg-agent
+gpg-connect-agent
 gpgconf complain
 gpgsm complain
 groupadd
@@ -256,7 +256,7 @@ who
 wpa_cli
 wpa-supplicant
 xbrlapi attach_disconnected,complain
-xclip complain
+xclip
 xdg-dbus-proxy complain
 xdg-desktop-menu
 xdg-email