feat(profiles): general update.

apparmor.d/groups/gnome/gnome-disks

@@ -12,6 +12,7 @@ profile gnome-disks @{exec_path} {
   include <abstractions/dconf-write>
   include <abstractions/disks-write>
   include <abstractions/gnome>
+  include <abstractions/user-download-strict>
 
   @{exec_path} mr,
 
@@ -23,8 +24,8 @@ profile gnome-disks @{exec_path} {
 
   owner @{user_cache_dirs}/gnome-disks/{,**} rw,
 
-  owner @{PROC}/@{pid}/cgroup r,
         @{PROC}/1/cgroup r,
+  owner @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/gnome-disks>
 }

apparmor.d/groups/gnome/gsd-print-notifications

@@ -80,6 +80,7 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
   @{libexec}/gsd-printer rPx,
 
   /etc/machine-id r,
+  /etc/cups/client.conf r,
 
   @{run}/cups/cups.sock rw,
 

apparmor.d/groups/gnome/nautilus

@@ -43,6 +43,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mr,
 
   /{usr/,}bin/{,ba,da}sh          rix,
+  /{usr/,}bin/net                rPUx,
   /{usr/,}bin/firejail           rPUx,
   /{usr/,}bin/bwrap              rPUx,
   /{usr/,}lib/gio-launch-desktop  rPx -> child-open,

apparmor.d/groups/gnome/tracker-extract

@@ -76,6 +76,7 @@ profile tracker-extract @{exec_path} {
   /usr/share/tracker3/{,**} r,
   /usr/share/gvfs/remote-volume-monitors/{,*} r,
 
+  /etc/blkid.conf r,
   /etc/fstab r,
   /etc/libva.conf r,
 

apparmor.d/groups/gnome/tracker-miner

@@ -85,6 +85,7 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
   /usr/share/tracker3/{,**} r,
 
   /etc/fstab r,
+  /etc/blkid.conf r,
 
   /var/lib/flatpak/exports/share/applications/{,mimeinfo.cache} r,
   /var/lib/snapd/desktop/applications/{,mimeinfo.cache} r,