feat(profiles): general update.

apparmor.d/groups/gnome/gnome-contacts-search-provider

@@ -20,6 +20,7 @@ profile gnome-contacts-search-provider @{exec_path} {
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/mime/mime.cache r,
 
+  owner @{user_share_dirs}/mime/mime.cache r,
   owner @{user_share_dirs}/folks/relationships.ini r,
 
   owner @{PROC}/@{pid}/cmdline r,

apparmor.d/groups/gnome/gnome-disks

@@ -10,6 +10,7 @@ include <tunables/global>
 profile gnome-disks @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
+  include <abstractions/disks-write>
   include <abstractions/gnome>
 
   @{exec_path} mr,
@@ -17,6 +18,8 @@ profile gnome-disks @{exec_path} {
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/X11/xkb/{,**} r,
 
+  owner @{user_cache_dirs}/gnome-disks/{,**} rw,
+
   owner @{PROC}/@{pid}/cgroup r,
         @{PROC}/1/cgroup r,
 

apparmor.d/groups/gnome/gnome-software

@@ -66,26 +66,31 @@ profile gnome-software @{exec_path} {
   /var/lib/PackageKit/offline-update-competed r,
   /var/lib/PackageKit/prepared-update r,
 
-  owner @{HOME}/.var/app/{,**/} r,
-  owner @{user_cache_dirs}/flatpak/system-cache/{,**} rw,
-  owner @{user_cache_dirs}/gnome-software/{,**} rw,
-  owner @{user_share_dirs}/ r,
-  owner @{user_share_dirs}/flatpak/repo/{,**} rw,
-
   /var/tmp/flatpak-cache-*/ rw,
   /var/tmp/flatpak-cache-*/** rwkl,
   /var/tmp/#[0-9]* rw,
 
+  owner @{HOME}/.var/app/{,**} rw,
+  owner @{user_cache_dirs}/flatpak/system-cache/{,**} rw,
+  owner @{user_cache_dirs}/gnome-software/{,**} rw,
+  owner @{user_config_dirs}/pulse/*.conf r,
+  owner @{user_share_dirs}/ r,
+  owner @{user_share_dirs}/flatpak/repo/{,**} rw,
+  owner @{user_share_dirs}/gnome-software/{,**} rw,
+
   owner /tmp/ostree-gpg-*/ rw,
   owner /tmp/ostree-gpg-*/** rwkl -> /tmp/ostree-gpg-*/**,
   owner /tmp/#[0-9]* rw,
 
-        @{run}/systemd/inhibit/*.ref rw,
+  owner @{run}/user/@{uid}/.dbus-proxy/ rw,
   owner @{run}/user/@{uid}/.dbus-proxy/a11y-bus-proxy-[0-9A-Z]* rw,
   owner @{run}/user/@{uid}/.dbus-proxy/session-bus-proxy-[0-9A-Z]* rw,
   owner @{run}/user/@{uid}/.flatpak-cache rw,
   owner @{run}/user/@{uid}/.flatpak/{,**} rw,
   owner @{run}/user/@{uid}/.flatpak/**/*.ref rwk,
+  owner @{run}/user/@{uid}/app/{,*/} rw,
+
+  @{run}/systemd/inhibit/*.ref rw,
 
   @{sys}/module/nvidia/version r,
 

apparmor.d/groups/gnome/gsd-media-keys

@@ -175,6 +175,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
   /var/lib/gdm{3,}/.config/pulse/client.conf r,
   /var/lib/gdm{3,}/.config/pulse/cookie rk,
 
+        @{run}/systemd/inhibit/[0-9]*.ref rw,
   owner @{run}/user/@{uid}/gdm/Xauthority r,
   owner @{run}/user/@{uid}/wayland-[0-9]* rw,
   owner @{run}/user/@{uid}/wayland-cursor-shared-* rw,

apparmor.d/groups/gnome/nautilus

@@ -63,8 +63,8 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   @{libexec}/ r,
   @{MOUNTDIRS}/ r,
   @{MOUNTS}/ r,
+  @{MOUNTS}/** rw,
   owner @{HOME}/{,**} rw,
-  owner @{MOUNTS}/** rw,
   owner @{run}/user/@{uid}/{,**} rw,
   owner /tmp/{,**} rw,
 
@@ -83,11 +83,12 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   @{sys}/devices/**/hwmon[0-9]*/**/{,name,temp*,fan*} r,
   @{sys}/devices/**/hwmon/{,name,temp*,fan*} r,
   @{sys}/devices/**/hwmon/**/{,name,temp*,fan*} r,
-  @{sys}/devices/system/cpu/possible r,
+  @{sys}/devices/pci[0-9]*/**/revision r,
 
+        @{PROC}/@{pids}/net/wireless r,
+        @{PROC}/sys/dev/i915/perf_stream_paranoid r,
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/mountinfo r,
-        @{PROC}/@{pids}/net/wireless r,
 
   /dev/tty rw,
   /dev/dri/card[0-9]* rw,