Update profiles.

apparmor.d/groups/browsers/firefox

@@ -86,10 +86,11 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
   /{usr/,}lib/mozilla/plugins/ r,
   /{usr/,}lib/mozilla/plugins/libvlcplugin.so mr,
   /usr/share/doc/{,**} r,
+  /usr/share/egl/{,**} r,
   /usr/share/firefox/{,**} r,
+  /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/mozilla/extensions/{,**} r,
   /usr/share/webext/{,**} r,
-  /usr/share/glib-2.0/schemas/gschemas.compiled r,
 
   /etc/firefox/{,**} r,
   /etc/fstab r,

apparmor.d/groups/bus/ibus-extension-gtk3

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/ibus/ibus-extension-gtk3
 profile ibus-extension-gtk3 @{exec_path} {
   include <abstractions/base>
+  include <abstractions/fontconfig-cache-write>
   include <abstractions/fonts>
   include <abstractions/gtk>
   include <abstractions/nameservice-strict>

apparmor.d/groups/gnome/gnome-shell

@@ -13,6 +13,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   include <abstractions/audio>
   include <abstractions/dri-common>
   include <abstractions/dri-enumerate>
+  include <abstractions/fontconfig-cache-write>
   include <abstractions/gnome>
   include <abstractions/mesa>
   include <abstractions/nameservice-strict>

apparmor.d/groups/pacman/pacman-hook-dconf

@@ -10,6 +10,8 @@ include <tunables/global>
 profile pacman-hook-dconf @{exec_path} {
   include <abstractions/base>
 
+  capability dac_read_search,
+
   @{exec_path} mr,
 
   /{usr/,}bin/bash  rix,

apparmor.d/groups/systemd/systemd-sleep

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/systemd/systemd-sleep
 profile systemd-sleep @{exec_path} {
   include <abstractions/base>
+  include <abstractions/nameservice-strict>
   include <abstractions/systemd-common>
 
   capability net_admin,