feat(profiles): general update.

apparmor.d/profiles-s-z/spice-vdagent

@@ -10,8 +10,9 @@ include <tunables/global>
 profile spice-vdagent @{exec_path} {
   include <abstractions/base>
   include <abstractions/audio>
-  include <abstractions/dbus-session-strict>
   include <abstractions/dbus-accessibility-strict>
+  include <abstractions/dbus-session-strict>
+  include <abstractions/fontconfig-cache-write>
   include <abstractions/fonts>
   include <abstractions/gtk>
   include <abstractions/X-strict>
@@ -56,9 +57,9 @@ profile spice-vdagent @{exec_path} {
 
   @{sys}/devices/pci[0-9]*/**/{device,vendor} r,
 
-  /dev/dri/card[0-9]* rw,
-
   owner @{PROC}/@{pids}/task/@{tid}/comm rw,
 
+  /dev/dri/card[0-9]* rw,
+
   include if exists <local/spice-vdagent>
 }

apparmor.d/profiles-s-z/steam-game

@@ -205,6 +205,7 @@ profile steam-game @{exec_path} flags=(attach_disconnected) {
   @{sys}/class/input/ r,
   @{sys}/class/sound/ r,
   @{sys}/devices/**/input[0-9]*/ r,
+  @{sys}/devices/**/input[0-9]*/**/{vendor,product} r,
   @{sys}/devices/**/input[0-9]*/capabilities/* r,
   @{sys}/devices/**/input/input[0-9]*/ r,
   @{sys}/devices/**/uevent r,

apparmor.d/profiles-s-z/swapon

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -17,10 +18,10 @@ profile swapon @{exec_path} {
 
   /etc/fstab r,
 
-  @{PROC}/swaps r,
-
-  # SWAP file common locations
   owner /swapfile rw,
+  owner /swap/swapfile rw,
+
+  @{PROC}/swaps r,
 
   include if exists <local/swapon>
 }