feat: small update and minor fixes.

apparmor.d/groups/apt/command-not-found

@@ -25,16 +25,13 @@ profile command-not-found @{exec_path} {
 
   @{lib}/python3/dist-packages/CommandNotFound/**/__pycache__/*.cpython-@{int}.pyc.@{int} w,
 
-  /var/lib/command-not-found/commands.db rwk,
-
   /usr/share/command-not-found/{,**} r,
 
+  /var/lib/command-not-found/commands.db rwk,
+
   owner @{PROC}/@{pid}/fd/ r,
 
   /dev/tty@{int} rw,
 
-  # Silencer
-  deny /usr/lib/ r,
-
   include if exists <local/command-not-found>
 }

apparmor.d/groups/browsers/firefox

@@ -54,7 +54,6 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
   signal (send) set=(term, kill) peer=firefox-*,
 
   # dbus: own bus=session name=org.mozilla.firefox
-  # dbus: own bus=session name=org.mozilla.firefox_beta
 
   deny dbus send bus=system path=/org/freedesktop/hostname1,
 

apparmor.d/groups/gnome/gdm

@@ -27,13 +27,16 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
 
   signal (send) set=(term),
 
+  unix (bind, listen) type=stream addr="@/tmp/dbus-@{rand8}",
+  unix (send receive accept) type=stream addr="@/tmp/dbus-@{rand8}" peer=(label=gdm-session-worker, addr=none),
+
   # dbus: own bus=system name=org.gnome.DisplayManager
 
   # dbus: talk bus=system name=org.freedesktop.login1 label=systemd-logind
 
   dbus send bus=system path=/org/freedesktop/Accounts
        interface=org.freedesktop.Accounts
-       member=ListCachedUsers
+       member={ListCachedUsers,UserAdded}
        peer=(name=:*, label=accounts-daemon),
   dbus send bus=system path=/org/freedesktop/Accounts
        interface=org.freedesktop.DBus.Properties

apparmor.d/groups/gnome/nautilus

@@ -27,6 +27,8 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   include <abstractions/openssl>
   include <abstractions/trash>
 
+  # userns,
+
   # mqueue r type=posix /,
 
   dbus bind bus=session name=org.gnome.Nautilus,

apparmor.d/tunables/multiarch.d/paths

@@ -38,7 +38,7 @@
 
 # Emails
 
-@{thunderbird_name} = thunderbird{,-bin}
+@{thunderbird_name} = thunderbird{,.sh,-bin} 
 @{thunderbird_lib_dirs} = @{lib}/@{thunderbird_name}
 @{thunderbird_path} = @{bin}/@{thunderbird_name} @{thunderbird_lib_dirs}/@{thunderbird_name}