feat(profile): allow drkonqi to read logs.

fix #655

apparmor.d/groups/kde/drkonqi

@@ -23,18 +23,35 @@ profile drkonqi @{exec_path} {
 
   @{exec_path} mr,
 
+  @{bin}/plasmashell r,
   @{bin}/lsb_release    rPx -> lsb_release,
 
   /usr/share/drkonqi/{,**} r,
 
+  /etc/machine-id r,
+
+  / r,
+
   owner @{user_cache_dirs}/drkonqi/ rw,
   owner @{user_cache_dirs}/drkonqi/** rwlk -> @{user_cache_dirs}/drkonqi/**,
   owner @{user_cache_dirs}/kcrash-metadata/* w,
 
+  owner @{user_config_dirs}/breezerc r,
   owner @{user_config_dirs}/drkonqirc r,
 
+  /{run,var}/log/journal/ r,
+  /{run,var}/log/journal/@{hex32}/ r,
+  /{run,var}/log/journal/@{hex32}/system.journal r,
+  /{run,var}/log/journal/@{hex32}/system@@{hex32}-@{hex16}-@{hex16}.journal* r,
+  /{run,var}/log/journal/@{hex32}/user-@{uid}.journal r,
+  /{run,var}/log/journal/@{hex32}/user-@{uid}@@{hex32}-@{hex16}-@{hex16}.journal* r,
+  /{run,var}/log/journal/remote/ r,
+
   /dev/tty r,
 
+  owner @{PROC}/@{pid}/cmdline r,
+  owner @{PROC}/@{pid}/mountinfo r,
+
   include if exists <local/drkonqi>
 }
 

apparmor.d/groups/kde/drkonqi-coredump-processor

@@ -10,6 +10,7 @@ include <tunables/global>
 @{exec_path} += @{lib}/@{multiarch}/{,libexec/}drkonqi-coredump-processor
 profile drkonqi-coredump-processor @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/qt5>
 
   capability dac_override,