gnu: homebank: Update to 5.9.6.

* gnu/packages/finance.scm (homebank): Update to 5.9.6.

Change-Id: I9912f1ab2b1604d0fe01b05639c227425f889ce1

gnu: darktable: Update to 5.4.0.

* gnu/packages/photo.scm (darktable): Update to 5.4.0.

Change-Id: Icddfad364b890d039c03c29b137bda69a8949e5d

gnu: gmic: Update to 3.6.5.

* gnu/packages/image-processing.scm (gmic): Update to 3.6.5.

Change-Id: I195bd513e7681e3f4273c67a3a032c01401d755f

gnu: veusz: Update to 4.2.

* gnu/packages/maths.scm (veusz): Update to 4.2.

Change-Id: I7f1a5e403826a466b78e4ec393d74d85b95d4c9b

gnu: python-mapie: Update to 1.2.0.

* gnu/packages/statistics.scm (python-mapie): Update to 1.2.0.
[arguments]<#:test-flags>: Set '--pyargs mapie'.

Change-Id: Ibebb655b70aed43bd65c2071c8e623f14e122a86

gnu: python-cma: Update to 4.4.1.

* gnu/packages/machine-learning.scm (python-cma): Update to 4.4.1.
[arguments]: Add '#:test-backend', '#:test-flags'.
<#:phases>: Do not override the 'check' phase.

Change-Id: I277fe650c6906323ca0dee820355faee72a4ab40

gnu: libscfg: Update to 0.2.0.

* gnu/packages/serialization.scm (libscfg): Update to 0.2.0.
[home-page]: Update to new url.
[source]: Update to new url.

Change-Id: Ic012ffd552bb999cc8f9c60939386e94c61ae51a

gnu: libscfg: Improve description.

* gnu/packages/serialization.scm (libscfg)[description]: Improve description.

Change-Id: I1fd984eedcf606fcc06e78b51546ddb27c88d265

gnu: Add hare-scfg.

* gnu/packages/hare-xyz.scm (hare-scfg): New variable.

Change-Id: Ie7c48a96c0639cf0d38f28e082943c8575e9937c

gnu: trealla: Update to 2.88.2.

* gnu/packages/prolog.scm (trealla): Update to 2.88.2.

Change-Id: I452a589dd2ed8023de78a1a90d06dae02a183e89

doc: Briefly discuss default git branch name.

* doc/contributing.texi (Building from git): Discuss branch name.

Change-Id: I9ddb9318749c7974a8724355c1a6b18a98fa9e8e
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>

gnu: grammalecte: Update to 2.3.0.

* gnu/packages/dictionaries.scm (grammalecte): Update to 2.3.0.
[source]: Update location.

Change-Id: Id5a9145102cdbf6f05b176e7f22e3ae5893b16a5

gnu: cantata: Update to 3.4.0.

* gnu/packages/mpd.scm (cantata): Update to 3.4.0.
[origin]: Remove unneeded bundled code.
[inputs]: Add karchive, kitemviews; remove unused libmusicbrainz, libebur128,
libmtp, mpg123, taglib.

Closes: guix/guix#5010
Change-Id: I9af0ec0f93d4d7b098217de8f77daf7cf26d90f4
Signed-off-by: 宋文武 <iyzsong@member.fsf.org>

gnu: mailutils: Update to 3.21.

* gnu/packages/mail.scm (mailutils): Update to 3.21.

Closes: guix/guix#5022
Change-Id: If12aa167438f205e0df0c5b7cb7661c3733fcc01
Signed-off-by: 宋文武 <iyzsong@member.fsf.org>

gnu: mu: Update to 1.12.14.

* gnu/packages/mail.scm (mu): Update to 1.12.14.
[arguments]<#:phases>{patch-bin-references}: Remove upstreamed patching.

Closes: guix/guix#5048
Change-Id: I54886215da506c8600e999f8f248b369389df0c1
Signed-off-by: 宋文武 <iyzsong@member.fsf.org>

guix-install.sh: Do not set GUILE_LOAD_PATH in zzz-guix.sh.

Channels from the load path will shadow channels used through time-machine or
used through any other guix than the one in ~/.config/guix/current. This is
true for all channels that are in ~/.config/guix/current except guix.  On Guix
System, /run/current-system/profile/share/guile/site/3.0 is usually in
GUILE_LOAD_PATH that typically has only Guix, so no shadowing happens in most
cases.

For using Geiser and other sw, it's possible to configure them to use "guix
repl" that's intended for this use case. This is then makes the guix being
used explicit.

It is expected that this is only a temporary solution. After a proper
solutions is found, it will be reverted.

Workaround #4819.
Reverts: 78390634d76c0c75c6e93742fa7caec965194641.

Change-Id: I36b921a758618f382af9097003415f902b27c44b
Signed-off-by: Rutherther <rutherther@ditigal.xyz>

guix-install.sh: Install AppArmor profile.

* etc/guix-install.sh (sys_maybe_setup_apparmor): New function.
(main_install): Call it.
(sys_delete_apparmor_profiles): New function.
(main_uninstall): Call it.

Fixes #4210.
Fixes <https://issues.guix.gnu.org/71226>.

Change-Id: Ice4bf4d91a1ae438fc5654dec327f53ae9a7b888
Signed-off-by: Rutherther <rutherther@ditigal.xyz>

self: Install AppArmor profile.

* guix/self.scm (apparmor-tunables): New procedure.
(miscellaneous-files): Add etc/apparmor.d/{guix,guix-daemon,tunables/guix}.

Change-Id: I8952ef4097924d62432775cc39d38098785fdcdf
Signed-off-by: Rutherther <rutherther@ditigal.xyz>

etc: Add AppArmor profile for the guix command.

* etc/apparmor.d/guix: New file.
* Makefile.am (nodist_apparmor_profile_DATA): Add it.

Change-Id: I3d61238203d7663ce582717f8e4eac4c6f679928
Signed-off-by: Rutherther <rutherther@ditigal.xyz>

etc: Add AppArmor profile for the daemon.

* .gitignore: Add etc/apparmor.d/tunables/guix.
* Makefile.am (nodist_apparmor_profile_DATA)
(nodist_apparmor_profile_tunables_DATA): Define it.
* configure.ac: Generate etc/apparmor.d/tunables/guix. Add
--with-apparmor-profile-dir option.
* etc/apparmor.d/guix-daemon: New file.
* etc/apparmor.d/tunables/guix.in: New file.
* doc/guix.texi: Document AppArmor profiles.
* gnu/packages/package-management.scm (guix): Add future changes commented.

Change-Id: Iac7df9d642383cc46a2d450c3badef31199ab041
Signed-off-by: Rutherther <rutherther@ditigal.xyz>