feat(profile): general update.

apparmor.d/profiles-g-l/glib-compile-schemas

@@ -17,10 +17,15 @@ profile glib-compile-schemas @{exec_path} {
   @{exec_path} mr,
 
   /usr/share/glib-2.0/schemas/{,*} r,
-  /usr/share/glib-2.0/schemas/gschemas.compiled.[A-Z0-9]* rw,
+  /usr/share/glib-2.0/schemas/gschemas.compiled.@{rand6} rw,
   /usr/share/glib-2.0/schemas/gschemas.compiled rw,
 
   /usr/share/gnome-shell/extensions/*/schemas/org.gnome.shell.extensions.*.gschema.xml r,
 
+  owner @{user_share_dirs}/gnome-shell/extension-updates/*/schemas/ r,
+  owner @{user_share_dirs}/gnome-shell/extension-updates/*/schemas/gschemas.compiled rw,
+  owner @{user_share_dirs}/gnome-shell/extension-updates/*/schemas/gschemas.compiled.@{rand6} rw,
+  owner @{user_share_dirs}/gnome-shell/extension-updates/*/schemas/org.gnome.shell.extensions.*.gschema.xml r,
+
   include if exists <local/glib-compile-schemas>
 }

apparmor.d/profiles-g-l/jackdbus

@@ -7,11 +7,19 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/jackdbus
-profile jackdbus @{exec_path} {
+profile jackdbus @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/bus-session>
+
+  signal (receive) set=(term) peer=gdm,
+
+  #aa:dbus own bus=session name=org.jackaudio.service
 
   @{exec_path} mr,
 
+  owner @{DESKTOP_HOME}/.log/ w,
+  owner @{DESKTOP_HOME}/.log/jack/{,**} rw,
+
   owner @{HOME}/.log/ w,
   owner @{HOME}/.log/jack/{,**} rw,
 

apparmor.d/profiles-g-l/locale-gen

@@ -32,6 +32,8 @@ profile locale-gen @{exec_path} {
 
   /etc/locale.gen r,
 
+  /var/lib/locales/supported.d/{,**} r,
+
   # Inherit Silencer
   deny network inet6 stream,
   deny network inet stream,