feat(profiles): general update.

apparmor.d/groups/freedesktop/iio-sensor-proxy

@@ -23,9 +23,13 @@ profile iio-sensor-proxy @{exec_path} {
 
   @{sys}/bus/ r,
   @{sys}/bus/iio/devices/ r,
+  @{sys}/bus/platform/devices/ r,
   @{sys}/class/ r,
+  @{sys}/class/input/ r,
   @{sys}/devices/**/uevent r,
+  @{sys}/devices/pci[0-9]*/**/ r,
   @{sys}/devices/pci[0-9]*/**/iio:*/** rw,
+  @{sys}/devices/pci[0-9]*/**/name r,
 
   /dev/iio:* r,
 

apparmor.d/groups/freedesktop/pipewire

@@ -80,6 +80,8 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
   @{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{idVendor,idProduct,removable,uevent} r,
   @{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name,bios_vendor} r,
 
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
+
   /dev/media[0-9]* rw,
 
   include if exists <local/pipewire>

apparmor.d/groups/freedesktop/update-mime-database

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/update-mime-database
 profile update-mime-database @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
   capability dac_override,

apparmor.d/groups/freedesktop/upowerd

@@ -54,9 +54,10 @@ profile upowerd @{exec_path} flags=(attach_disconnected) {
   @{run}/udev/data/+pci* r,
   @{run}/udev/data/+platform* r,
   @{run}/udev/data/+power_supply* r,
-  @{run}/udev/data/+sound:card[0-9]* r, # For sound
+  @{run}/udev/data/+sound:card[0-9]* r, # for sound
+  @{run}/udev/data/c10:[0-9]* r,        # for non-serial mice, misc features
+  @{run}/udev/data/c13:[0-9]*  r,       # for /dev/input/*
   @{run}/udev/data/c116:[0-9]* r,       # for ALSA
-  @{run}/udev/data/c13:[0-9]*  r, # for /dev/input/*
 
   @{run}/systemd/inhibit/[0-9]*.ref rw,