session-lockdown: provide debug information about processes we look at

We're effectively asserting that all these processes are running,
so we should look at whether they, in fact, *are* running, and
if not, why not.

Reviewed-by: Philip Withnall <philip.withnall@collabora.co.uk>
Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Differential Revision: https://phabricator.apertis.org/D3639

apparmor/session-lockdown/no-deny

@@ -178,6 +178,26 @@ def after_reboot():
             'pactl', 'stat')
     log_subprocess('aa-status')
 
+    log_subprocess('systemd-cgls')
+
+    log_subprocess('systemctl', '--no-pager', 'status',
+            'connman.service', may_fail=True)
+    log_subprocess('systemctl', '--no-pager', 'status',
+            'ofono.service', may_fail=True)
+
+    log_subprocess('sudo', '-u', ORDINARY_USER,
+            'env', 'XDG_RUNTIME_DIR=/run/user/{}'.format(ORDINARY_UID),
+            'systemctl', '--no-pager', '--user', 'status',
+            'pulseaudio.service', may_fail=True)
+    log_subprocess('sudo', '-u', ORDINARY_USER,
+            'env', 'XDG_RUNTIME_DIR=/run/user/{}'.format(ORDINARY_UID),
+            'systemctl', '--no-pager', '--user', 'status',
+            'tracker-miner-fs.service', may_fail=True)
+    log_subprocess('sudo', '-u', ORDINARY_USER,
+            'env', 'XDG_RUNTIME_DIR=/run/user/{}'.format(ORDINARY_UID),
+            'systemctl', '--no-pager', '--user', 'status',
+            'tracker-store.service', may_fail=True)
+
     profiles = get_profiles()
 
     for k, v in profiles.items():