feat(abs): add the fusermount abstraction.

apparmor.d/groups/gvfs/gvfsd-fuse

@@ -40,24 +40,17 @@ profile gvfsd-fuse @{exec_path} {
 
   profile fusermount {
     include <abstractions/base>
-    include <abstractions/nameservice-strict>
+    include <abstractions/app/fusermount>
 
-    capability dac_read_search,
-    capability sys_admin,  # To mount anything
+    capability setuid,
 
     mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/,
     umount @{run}/user/@{uid}/**/,
 
     unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse),
 
-    @{bin}/fusermount{,3} mr,
-
-    /etc/fuse{,3}.conf r,
-    /etc/machine-id r,
-
-    @{PROC}/@{pid}/mounts r,
-
-    /dev/fuse rw,
+    @{bin}/mount          rix,
+    @{bin}/umount         rix,
 
     include if exists <local/gvfsd-fuse_fusermount>
   }