feat(profile): general update.

apparmor.d/profiles-s-z/snap

@@ -50,7 +50,9 @@ profile snap @{exec_path} {
   @{bin}/systemctl        rPx -> child-systemctl,
 
   /snap/{,**} rw,
-  # @{lib_dirs}/snap-confine           rPx -> /usr/lib/snapd/snap-confine,
+  /snap/snapd/@{int}/usr/lib/snapd/snap-confine rPx,
+  @{lib}/snapd/snap-confine rPx,
+
   @{lib_dirs}/snapd/snap-seccomp     rPx,
   @{lib_dirs}/snapd/snapd            rPx,
 

apparmor.d/profiles-s-z/sudo

@@ -1,6 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2022 Mikhail Morfikov
-# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -8,6 +8,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/sudo
+#@{bin}/su
 profile sudo @{exec_path} {
   include <abstractions/base>
   include <abstractions/app-launcher-root>
@@ -40,10 +41,10 @@ profile sudo @{exec_path} {
   signal (send) set=(cont,hup) peer=su,
   signal (send) set=(winch),
 
-  dbus send bus=system path=/org/freedesktop/login[0-9]
-       interface=org.freedesktop.login[0-9].Manager
+  dbus send bus=system path=/org/freedesktop/login1
+       interface=org.freedesktop.logi1.Manager
        member=CreateSession
-       peer=(name=org.freedesktop.login[0-9]),
+       peer=(name=org.freedesktop.login1),
 
   dbus (send receive) bus=session path=/org/freedesktop/systemd1
          interface=org.freedesktop.systemd.Manager

apparmor.d/profiles-s-z/transmission-gtk

@@ -33,6 +33,9 @@ profile transmission-gtk @{exec_path} {
 
   @{exec_path} mr,
 
+  @{bin}/xdg-open                                    rPx -> child-open,
+  @{lib}/gio-launch-desktop                          rPx -> child-open,
+
   /usr/share/X11/xkb/{,**} r,
 
   owner @{user_torrents_dirs}/ r,

apparmor.d/profiles-s-z/x11-xsession

@@ -36,7 +36,7 @@ profile x11-xsession @{exec_path} {
   @{bin}/run-parts         rCx -> run-parts,
   @{bin}/udevadm           rCx -> udevadm,
 
-  @{bin}/flatpak          rPUx,
+  @{bin}/flatpak           rPx,
   @{bin}/xrdb              rPx,
   @{bin}/numlockx          rPx,
   @{bin}/xhost             rPx,

apparmor.d/profiles-s-z/xinit

@@ -44,7 +44,7 @@ profile xinit @{exec_path} {
   @{bin}/run-parts   rCx -> run-parts,
   @{bin}/udevadm     rCx -> udevadm,
 
-  @{bin}/flatpak    rPUx,
+  @{bin}/flatpak     rPx,
   @{bin}/glxinfo     rPx,
   @{bin}/numlockx    rPx,
   @{bin}/X           rPx,