Update fd

fix permission order

apparmor.d/profiles-a-f/fd

@@ -10,11 +10,11 @@ include <tunables/global>
 profile fd @{exec_path}  {
   include <abstractions/base>
 
+  @{exec_path} mr,
+
   ## Allow reading the entire filesystem to search for filenames
   /{,**} r,
 
-  @{exec_path} mr,
-
   include if exists <local/fd>
 }