feat(profile): more kde integration.

fix #442

apparmor.d/profiles-s-z/su

@@ -28,6 +28,8 @@ profile su @{exec_path} {
 
   @{etc_ro}/default/su r,
 
+  @{HOME}/.xauth@{rand6} rw,
+
   include if exists <local/su>
 }
 

apparmor.d/profiles-s-z/xauth

@@ -10,6 +10,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/xauth
 profile xauth @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
   @{exec_path} mr,

apparmor.d/profiles-s-z/xclip

@@ -10,14 +10,13 @@ include <tunables/global>
 @{exec_path} = @{bin}/xclip
 profile xclip @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/X-strict>
 
   network unix stream,
 
   @{exec_path} mr,
 
-  deny /dev/tty rw,
-
   include if exists <local/xclip>
 }