Allow rw for /dev/null, which is used as stdin/out/err for the configured NotificationCommand.
Add include for local apparmor override file, where rules for the notification command binary can be added by the local administrator without touching the included profile for xmpp-client itself.
Remarks:
The local include could also point to a more default location (for most distros, this would probably be <local/usr.bin.xmpp-client>), but since the included apparmor profile is not named usr.bin.xmpp-client at the moment, this might be left to downstream distributors.
If desired, I could write a paragraph for the README describing how to setup the apparmor profile with enabled NotificationCommand. I tested the updated profile with a custom local override file for my NotificationCommand using debian sid and did not experience any problems.
Changes:
Remarks:
The local include could also point to a more default location (for most distros, this would probably be
<local/usr.bin.xmpp-client>), but since the included apparmor profile is not namedusr.bin.xmpp-clientat the moment, this might be left to downstream distributors. If desired, I could write a paragraph for the README describing how to setup the apparmor profile with enabled NotificationCommand. I tested the updated profile with a custom local override file for my NotificationCommand using debian sid and did not experience any problems.