Update profiles.

apparmor.d/groups/gnome/gdm-xsession

@@ -35,11 +35,18 @@ profile gdm-xsession @{exec_path} {
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
 
+  # file_inherit
+  /dev/tty rw,
+  /dev/tty[0-9]* rw,
+
   profile dbus {
     include <abstractions/base>
 
     /{usr/,}bin/dbus-update-activation-environment mr,
 
+    # file_inherit
+    /dev/tty rw,
+    /dev/tty[0-9]* rw,
     owner @{HOME}/.xsession-errors w,
   }
 

apparmor.d/groups/gnome/gnome-calculator-search-provider

@@ -26,5 +26,7 @@ profile gnome-calculator-search-provider @{exec_path} {
 
   owner @{PROC}/@{pid}/fd/ r,
 
+  owner @{run}/user/@{uid}/gdm/Xauthority r,
+
   include if exists <local/gnome-calculator-search-provider>
 }

apparmor.d/groups/gnome/gnome-control-center-search-provider

@@ -21,5 +21,7 @@ profile gnome-control-center-search-provider @{exec_path} {
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
 
+  owner @{run}/user/@{uid}/gdm/Xauthority r,
+
   include if exists <local/gnome-control-center-search-provider>
 }

apparmor.d/groups/gnome/gnome-shell

@@ -31,9 +31,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   ptrace (read),
 
   signal (receive) set=(term, hup) peer=gdm*,
-  signal (send) set=(usr1) peer=ibus-daemon,
+  signal (send) set=(kill) peer=unconfined,
   signal (send) set=(term) peer=polkit*,
   signal (send) set=(term) peer=xwayland,
+  signal (send) set=(usr1) peer=ibus-daemon,
 
   @{exec_path} mr,
 

apparmor.d/groups/gnome/tracker-miner

@@ -40,5 +40,7 @@ profile tracker-miner @{exec_path} {
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
 
+  @{run}/mount/utab r,
+
   include if exists <local/tracker-miner>
 }