feat(profiles): general update.

apparmor.d/profiles-s-z/scrcpy

@@ -32,6 +32,15 @@ profile scrcpy @{exec_path} {
   /var/lib/dbus/machine-id r,
 
   owner @{user_config_dirs}/ibus/bus/{,@{hex}-unix{,-wayland}-[0-9]} r,
+  owner @{user_config_dirs}/pulse/client.conf r,
+  owner @{user_config_dirs}/pulse/cookie r,
+  owner @{user_config_dirs}/pulse/cookie rk,
+
+  owner @{run}/user/@{uid}/pulse/ r,
+
+  /dev/shm/ r,
+
+  deny @{user_share_dirs}/gvfs-metadata/* r,
 
   include if exists <local/scrcpy>
 }

apparmor.d/profiles-s-z/who

@@ -17,5 +17,7 @@ profile who @{exec_path} {
 
   @{exec_path} mr,
 
+  deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
+
   include if exists <local/who>
 }

apparmor.d/profiles-s-z/wireplumber

@@ -59,6 +59,8 @@ profile wireplumber @{exec_path} {
   @{sys}/devices/pci[0-9]*/**/video4linux/video[0-9]*/uevent r,
   @{sys}/devices/virtual/dmi/id/bios_vendor r,
 
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
+
   /dev/media[0-9]* rw,
   /dev/snd/ r,