Enforce some profiles.

apparmor.d/profiles-a-l/aa-notify

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/aa-notify
-profile aa-notify @{exec_path} flags=(complain) {
+profile aa-notify @{exec_path} {
   include <abstractions/base>
   include <abstractions/python>
   include <abstractions/nameservice-strict>

profiles.manifest

@@ -2,7 +2,7 @@ aa-notify
 accounts-daemon
 acpi
 acpid attach_disconnected,complain
-adb complain
+adb
 adduser
 amixer
 arch-audit complain
@@ -15,7 +15,7 @@ blueman-rfcomm-watcher
 bluemoon
 bluetoothctl
 bluetoothd
-browserpass complain
+browserpass
 chage
 chfn
 child-lsb_release
@@ -81,11 +81,11 @@ gnome-session-binary attach_disconnected,complain
 gnome-session-ctl complain
 gnome-shell attach_disconnected,complain
 gnome-shell-calendar-server complain
-goa-daemon complain
+goa-daemon
-goa-identity-service complain
+goa-identity-service
 gpasswd
-gpg-agent complain
+gpg-agent
-gpg-connect-agent complain
+gpg-connect-agent
 gpgconf complain
 gpgsm complain
 groupadd
@@ -256,7 +256,7 @@ who
 wpa_cli
 wpa-supplicant
 xbrlapi attach_disconnected,complain
-xclip complain
+xclip
 xdg-dbus-proxy complain
 xdg-desktop-menu
 xdg-email