feat(profiles): general update.

apparmor.d/groups/freedesktop/colord

@@ -18,7 +18,7 @@ profile colord @{exec_path} flags=(attach_disconnected) {
   network netlink raw,
 
   dbus (send,receive) bus=system path=/org/freedesktop/ColorManager{,/**}
-       interface=org.freedesktop.{DBus.Properties,ColorManager},
+       interface=org.freedesktop.{DBus.Properties,ColorManager*},
 
   dbus send bus=system path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus

apparmor.d/groups/freedesktop/geoclue

@@ -53,6 +53,10 @@ profile geoclue @{exec_path} flags=(attach_disconnected) {
        interface=org.freedesktop.NetworkManager
        member={CheckPermissions,StateChanged,PropertiesChanged},
 
+  dbus receive bus=system path=/org/freedesktop/NetworkManager
+       interface=org.freedesktop.DBus.Properties
+       member=PropertiesChanged,
+
   dbus bind bus=system 
        name=org.freedesktop.GeoClue2,
 

apparmor.d/groups/freedesktop/plymouthd

@@ -32,13 +32,13 @@ profile plymouthd @{exec_path} {
 
   @{run}/udev/data/+drm:* r,
   @{run}/udev/data/c226:* r,
+  @{run}/udev/data/c29:* r,
 
   @{sys}/bus/ r,
   @{sys}/class/ r,
   @{sys}/class/drm/ r,
-  @{sys}/devices/pci[0-9]*/**/drm/card[0-9]/card[0-9]-{HDMI,VGA,LVDS,DP,eDP,Virtual}-*/uevent r,
-  @{sys}/devices/pci[0-9]*/**/drm/card[0-9]/uevent r,
-  @{sys}/devices/pci[0-9]*/**/drm/renderD128/uevent r,
+  @{sys}/class/graphics/ r,
+  @{sys}/devices/pci[0-9]*/**/{,uevent} r,
   @{sys}/devices/virtual/tty/console/active r,
   @{sys}/firmware/acpi/bgrt/{,*} r,
 

apparmor.d/groups/freedesktop/xorg

@@ -13,6 +13,7 @@ include <tunables/global>
 @{exec_path} += /{usr/,}lib/xorg/Xorg{,.wrap}
 profile xorg @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/dbus-strict>
   include <abstractions/fontconfig-cache-read>
   include <abstractions/fonts>
   include <abstractions/freedesktop.org>
@@ -40,6 +41,15 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
 
   network netlink raw,
 
+  dbus send bus=system path=/org/freedesktop/login[0-9]{,/session/*}
+       interface=org.freedesktop.{DBus.Properties,login1.Session}
+       member={ReleaseControl,TakeControl,TakeDevice,ReleaseDevice,GetSessionByPID}
+       peer=(name=org.freedesktop.login[0-9]),
+
+  dbus receive bus=system path=/org/freedesktop/login[0-9]/session/*
+       interface=org.freedesktop.login1.Session
+       member=PauseDevice,
+
   @{exec_path} mrix,
 
   /{usr/,}bin/{,ba,da}sh rix,