feat(profile): general update.

apparmor.d/groups/freedesktop/dconf-editor

@@ -22,8 +22,5 @@ profile dconf-editor @{exec_path} {
   owner @{user_config_dirs}/glib-2.0/settings/keyfile rw,
   owner @{user_config_dirs}/glib-2.0/settings/.goutputstream-@{rand6} rw,
 
-  owner @{HOME}/.Xauthority r,
-  owner /dev/tty@{int} rw,
-
   include if exists <local/dconf-editor>
 }

apparmor.d/groups/freedesktop/update-desktop-database

@@ -28,7 +28,6 @@ profile update-desktop-database @{exec_path} flags=(attach_disconnected) {
   /var/lib/snapd/desktop/applications/mimeinfo.cache w,
 
   owner @{user_share_dirs}/.mimeinfo.cache.* rw,
-  owner @{user_share_dirs}/{,**/} r,
   owner @{user_share_dirs}/**.desktop r,
   owner @{user_share_dirs}/applications/.mimeinfo.cache.* rw,
   owner @{user_share_dirs}/applications/mimeinfo.cache w,
@@ -37,6 +36,7 @@ profile update-desktop-database @{exec_path} flags=(attach_disconnected) {
   # Inherit silencer
   deny network inet6 stream,
   deny network inet stream,
+  deny network netlink raw,
 
   include if exists <local/update-desktop-database>
 }

apparmor.d/groups/freedesktop/xdg-settings

@@ -59,10 +59,9 @@ profile xdg-settings @{exec_path} {
     @{bin}/dbus-send     mr,
     @{bin}/dbus-daemon  rPx,
 
-    # for dbus-launch
     owner @{HOME}/.dbus/session-bus/@{hex}-[0-9] w,
 
-    @{HOME}/.Xauthority r,
+    include if exists <local/xdg-settings_dbus>
   }
 
   include if exists <local/xdg-settings>