Merge Add ncurses abstraction with terminfo paths

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1550
Approved-by: Christian Boltz <apparmor@cboltz.de>
Merged-by: Ryan Lee <rlee287@yahoo.com>

profiles/apparmor.d/abstractions/terminfo

@@ -0,0 +1,10 @@
+  abi <abi/4.0>,
+
+  # Default hardcoded locations searched by ncurses for terminfo
+  @{HOME}/.terminfo/** r,
+  /etc/terminfo/** r,
+  /{usr/,}lib/terminfo/** r,
+  /usr/share/terminfo/** r,
+
+  # Local overrides for systems with TERMINFO env vars, etc.
+  include if exists <abstractions/terminfo.d>

profiles/apparmor.d/alsamixer

@@ -6,9 +6,9 @@ profile alsamixer /{usr,}/bin/alsamixer {
     include <abstractions/base>
     include <abstractions/consoles>
     include <abstractions/nameservice-strict>
-    include <abstractions/dbus-session-strict>
+    include <abstractions/terminfo>
 
-    /usr/share/terminfo/** r,
+    include <abstractions/dbus-session-strict>
 
     @{sys}/devices/virtual/dmi/id/sys_vendor r,
 

profiles/apparmor.d/lsb_release

@@ -12,6 +12,7 @@ include <tunables/global>
 profile lsb_release {
   include <abstractions/base>
   include <abstractions/python>
+  include <abstractions/terminfo>
 
   owner @{PROC}/@{pid}/fd/ r,
 
@@ -43,7 +44,6 @@ profile lsb_release {
   /usr/include/python*/pyconfig.h r,
   /usr/share/distro-info/** r,
   /usr/share/dpkg/** r,
-  /usr/share/terminfo/** r,
   /var/lib/dpkg/** r,
 
   # file_inherit

profiles/apparmor.d/tnftp

@@ -21,6 +21,7 @@ profile tnftp /usr/bin/tnftp {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/nameservice>
+  include <abstractions/terminfo>
   include <abstractions/user-tmp>
   include <abstractions/user-download>
   include <abstractions/private-files-strict>
@@ -28,9 +29,6 @@ profile tnftp /usr/bin/tnftp {
   network inet stream,
   network inet6 stream,
 
-  # readline wants to know terminal capabilities
-  file r /usr/share/terminfo/**,
-
   # required for the pager (less, more) to work
   file Cx /usr/bin/dash,
 
@@ -52,11 +50,10 @@ profile tnftp /usr/bin/tnftp {
   # Defined as sub profile of tnftp for backwards compatibility.
   profile dash//more {
     include <abstractions/base>
+    include <abstractions/terminfo>
     network (send, receive) inet stream,
     network (send, receive) inet6 stream,
 
-    # readline wants to know terminal capabilities
-    file r /usr/share/terminfo/**,
     file mr /usr/bin/more,
   }
 

profiles/apparmor/profiles/extras/usr.lib.man-db.man

@@ -17,6 +17,7 @@ include <tunables/global>
   include <abstractions/base>
   include <abstractions/bash>
   include <abstractions/consoles>
+  include <abstractions/terminfo>
   include <abstractions/user-manpages>
 
   /{usr/,}bin/bash rmix,
@@ -61,7 +62,6 @@ include <tunables/global>
   /usr/share/locale-bundle/** r,
   /usr/share/man/ r,
   /usr/share/man/** r,
-  /usr/share/terminfo/** r,
   /usr/share/texmf/teTeX/man/** r,
   /usr/share/postgresql/*/man/** rk,