maybe chmod 0644 'apparmor.d/local/sbin.klogd'
maybe chmod 0644 'apparmor.d/local/sbin.syslog-ng'
maybe chmod 0644 'apparmor.d/local/sbin.syslogd'
+maybe chmod 0644 'apparmor.d/local/ubuntu_pro_apt_news'
maybe chmod 0644 'apparmor.d/local/usr.bin.chromium-browser'
maybe chmod 0644 'apparmor.d/local/usr.bin.evince'
maybe chmod 0644 'apparmor.d/local/usr.bin.firefox'
maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs'
maybe chmod 0755 'apparmor.d/tunables/xdg-user-dirs.d'
maybe chmod 0644 'apparmor.d/tunables/xdg-user-dirs.d/site.local'
+maybe chmod 0644 'apparmor.d/ubuntu_pro_apt_news'
maybe chmod 0644 'apparmor.d/usr.bin.chromium-browser'
maybe chmod 0644 'apparmor.d/usr.bin.evince'
maybe chmod 0644 'apparmor.d/usr.bin.firefox'
maybe chmod 0644 'logrotate.d/samba'
maybe chmod 0644 'logrotate.d/sane-utils'
maybe chmod 0644 'logrotate.d/speech-dispatcher'
-maybe chmod 0644 'logrotate.d/ubuntu-advantage-tools'
+maybe chmod 0644 'logrotate.d/ubuntu-pro-client'
maybe chmod 0644 'logrotate.d/ufw'
maybe chmod 0644 'logrotate.d/ulogd2'
maybe chmod 0644 'logrotate.d/winbind'
--- /dev/null
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+profile ubuntu_pro_apt_news flags=(attach_disconnected) {
+ include <abstractions/base>
+ include <abstractions/nameservice>
+ include <abstractions/openssl>
+ include <abstractions/python>
+
+ # Needed because apt-news calls apt_pkg.init() which tries to
+ # switch to the _apt system user/group.
+ capability setgid,
+ capability setuid,
+ capability dac_read_search,
+
+ /etc/apt/** r,
+ /etc/default/apport r,
+ /etc/ubuntu-advantage/* r,
+ /usr/bin/python3.{1,}[0-9] mrix,
+
+ /usr/lib/apt/methods/http mrix,
+ /usr/lib/apt/methods/https mrix,
+ /usr/lib/ubuntu-advantage/apt_news.py r,
+ /usr/share/dpkg/* r,
+ /var/log/ubuntu-advantage.log rw,
+ /var/lib/ubuntu-advantage/** r,
+ /var/lib/ubuntu-advantage/messages/ rw,
+ /var/lib/ubuntu-advantage/messages/* rw,
+ /run/ubuntu-advantage/ rw,
+ /run/ubuntu-advantage/* rw,
+
+ /tmp/** r,
+
+ owner @{PROC}/@{pid}/fd/ r,
+ @{PROC}/@{pid}/cgroup r,
+
+
+}
\ No newline at end of file
-# This file is used by Ubuntu Pro and supplied by the ubuntu-advantage-tools
+# This file is used by Ubuntu Pro and supplied by the ubuntu-pro-client
# package. It has no effect if Ubuntu Pro services are not in use since no
# other apt repositories are expected to match o=UbuntuESMApps.
#
-# This file is used by Ubuntu Pro and supplied by the ubuntu-advantage-tools
+# This file is used by Ubuntu Pro and supplied by the ubuntu-pro-client
# package. It has no effect if Ubuntu Pro services are not in use since no
# other apt repositories are expected to match o=UbuntuESM.
#
+++ /dev/null
-# use the root group by default, since this is the owning group
-# of /var/log/ubuntu-advantage*.log files.
-/var/log/ubuntu-advantage*.log {
- su root root
- create 0644 root root
- rotate 6
- monthly
- compress
- delaycompress
- missingok
- notifempty
-}
--- /dev/null
+# use the root group by default, since this is the owning group
+# of /var/log/ubuntu-advantage*.log files.
+/var/log/ubuntu-advantage*.log {
+ su root root
+ create 0644 root root
+ rotate 6
+ monthly
+ compress
+ delaycompress
+ missingok
+ notifempty
+}
[Sources]
Pockets=security,updates,proposed,backports,infra-security,infra-updates,apps-security,apps-updates
[Distro]
-PostInstallScripts=./xorg_fix_proprietary.py, /usr/lib/ubuntu-advantage/upgrade_lts_contract.py
+PostInstallScripts=./xorg_fix_proprietary.py, /usr/lib/ubuntu-advantage/convert_list_to_deb822.py, /usr/lib/ubuntu-advantage/upgrade_lts_contract.py