feat(profiles): general update.

apparmor.d/groups/freedesktop/geoclue

@@ -74,6 +74,8 @@ profile geoclue @{exec_path} flags=(attach_disconnected) {
 
   /etc/geoclue/{,**} r,
 
+  /var/lib/nscd/services r,
+
   @{run}/systemd/journal/socket rw,
 
   @{PROC}/@{pids}/cgroup r,

apparmor.d/groups/freedesktop/plymouthd

@@ -46,7 +46,7 @@ profile plymouthd @{exec_path} {
   @{sys}/class/ r,
   @{sys}/class/drm/ r,
   @{sys}/class/graphics/ r,
-  @{sys}/devices/pci[0-9]*/**/{,uevent,vendor.device} r,
+  @{sys}/devices/pci[0-9]*/**/{,uevent,vendor,device} r,
   @{sys}/devices/pci[0-9]*/**/{,uevent} r,
   @{sys}/devices/virtual/graphics/fbcon/uevent r,
   @{sys}/devices/virtual/tty/console/active r,

apparmor.d/groups/freedesktop/xdg-document-portal

@@ -105,7 +105,7 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
 
     /{usr/,}bin/fusermount{,3} mr,
 
-    /etc/fuse.conf r,
+    /etc/fuse{,3}.conf r,
 
     mount options=(rw, rprivate) -> /,
     mount options=(rw, rbind) @{run}/user/@{uid}/ -> /,

apparmor.d/groups/freedesktop/xdg-user-dir

@@ -17,5 +17,9 @@ profile xdg-user-dir @{exec_path} {
 
   owner @{user_config_dirs}/user-dirs.dirs r,
 
+  # Silencer
+  deny network inet stream,
+  deny network inet6 stream,
+
   include if exists <local/xdg-user-dir>
 }