feat(profile): general update.

apparmor.d/groups/freedesktop/pipewire

@@ -46,12 +46,12 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
 
   / r,
   /.flatpak-info r,
-  
-  owner @{user_config_dirs}/pipewire/pipewire-pulse.conf r,
-  owner @{user_config_dirs}/pipewire/pipewire.conf r,
+
+  owner @{user_config_dirs}/pipewire/{,**} r,
 
   owner /tmp/librnnoise-@{int}.so rm,
 
+  owner @{run}/user/@{uid}/pipewire-@{int} rw,
   owner @{run}/user/@{uid}/pipewire-@{int}-manager.lock rwk,
   owner @{run}/user/@{uid}/pipewire-@{int}.lock rwk,
   owner @{run}/user/@{uid}/pulse/pid rw,

apparmor.d/groups/freedesktop/xprop

@@ -10,23 +10,10 @@ include <tunables/global>
 @{exec_path} = @{bin}/xprop
 profile xprop @{exec_path} {
   include <abstractions/base>
+  include <abstractions/freedesktop.org>
+  include <abstractions/X-strict>
 
   @{exec_path} mr,
 
-  /usr/etc/X11/xdm/Xresources r,
-  /usr/share/icons/*/cursors/crosshair r,
-
-  owner @{HOME}/.Xauthority r,
-  owner @{HOME}/.icons/default/index.theme r,
-  
-  owner /tmp/runtime-*/xauth_@{rand6} r,
-  owner /tmp/xauth_@{rand6} r,
-
-  owner @{run}/user/@{uid}/xauth_@{rand6} rl,
-
-  # file_inherit
-  owner /dev/tty@{int} rw,
-  owner @{HOME}/.xsession-errors w,
-
   include if exists <local/xprop>
 }

apparmor.d/groups/freedesktop/xwayland

@@ -18,8 +18,6 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
   signal (receive) set=(term hup) peer=kwin_wayland,
   signal (receive) set=(term hup) peer=login,
 
-  unix (send,receive) type=stream addr=none peer=(label=gnome-shell),
-
   @{exec_path} mrix,
 
   @{sh_path}        rix,