feat: update profiles.

apparmor.d/groups/browsers/firefox

@@ -126,7 +126,6 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
   owner @{user_cache_dirs}/mozilla/** rwk,
 
   owner @{user_share_dirs}/ r,
-  owner @{user_share_dirs}/gvfs-metadata/{,*} r,
   owner @{user_share_dirs}/mime/packages/user-extension-{htm,html,xht,xhtml,shtml}.xml rw,
   owner @{user_share_dirs}/mime/packages/user-extension-{htm,html,xht,xhtml,shtml}.xml.* rw,
 
@@ -189,6 +188,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
   # Silencer
   deny /{usr/,}lib/firefox/** w,
   deny capability sys_ptrace,
+  deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
   deny owner @{HOME}/.* r,
 
   profile open {

apparmor.d/groups/browsers/firefox-crashreporter

@@ -64,5 +64,8 @@ profile firefox-crashreporter @{exec_path} flags=(attach_disconnected) {
   /dev/dri/card[0-9]* rw,
   /dev/dri/renderD128 rw,
 
+  # Silencer
+  deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
+
   include if exists <local/firefox-crashreporter>
 }

apparmor.d/groups/browsers/firefox-minidump-analyzer

@@ -34,7 +34,19 @@ profile firefox-minidump-analyzer @{exec_path} {
 
   owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* r,
 
+  owner @{PROC}/@{pid}/task/@{tid}/stat r,
+  owner @{PROC}/@{pid}/stat r,
+
   /dev/dri/renderD128 rw,
 
+  # Silencer
+  deny network inet dgram,
+  deny network inet6 dgram,
+  deny network inet stream,
+  deny network inet6 stream,
+  deny network netlink raw,
+  deny owner @{MOZ_HOMEDIR}/firefox/*/extensions/*.xpi r,
+  deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
+
   include if exists <local/firefox-minidump-analyzer>
 }