feat(profile): general update.

apparmor.d/groups/freedesktop/dconf-editor

@@ -16,6 +16,8 @@ profile dconf-editor @{exec_path} {
 
   @{exec_path} mr,
 
+  @{open_path}  rPx -> child-open-help,
+
   # When GSETTINGS_BACKEND=keyfile
   owner @{user_config_dirs}/glib-2.0/ rw,
   owner @{user_config_dirs}/glib-2.0/settings/ rw,

apparmor.d/groups/freedesktop/pulseaudio

@@ -62,22 +62,11 @@ profile pulseaudio @{exec_path} {
        member=GetManagedObjects
        peer=(name=org.bluez),
 
-  dbus send bus=system path=/
-       interface=org.freedesktop.DBus.Peer
-       member=Ping
-       peer=(name=org.freedesktop.Avahi, label=avahi-daemon),
-
   dbus send bus=system path=/Client@{int}/ServiceResolver@{int}
        interface=org.freedesktop.Avahi.ServiceResolver
        member={Found,Free}
        peer=(name=org.freedesktop.Avahi, label=avahi-daemon),
 
-  # No label in rule
-  dbus send bus=system path=/org/freedesktop/RealtimeKit@{int}
-       interface=org.freedesktop.RealtimeKit@{int}
-       member=MakeThreadHighPriority
-       peer=(name=org.freedesktop.RealtimeKit@{int}),
-
   @{exec_path} mrix,
 
   @{lib}/pulse/gsettings-helper rix,

apparmor.d/groups/gnome/loupe

@@ -34,6 +34,7 @@ profile loupe @{exec_path} flags=(attach_disconnected) {
   @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/cpu.max r,
 
   owner @{PROC}/@{pid}/cgroup r,
+  owner @{PROC}/@{pid}/cmdline r,
 
   deny @{user_share_dirs}/gvfs-metadata/* r,
 

apparmor.d/groups/ubuntu/notify-reboot-required

@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = /usr/share/update-notifier/notify-reboot-required
+@{exec_path} = /usr/share/{update,reboot}-notifier/notify-reboot-required
 profile notify-reboot-required @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
@@ -17,7 +17,7 @@ profile notify-reboot-required @{exec_path} {
   @{bin}/gettext     rix,
   @{bin}/snap       rPUx,
 
-  /usr/share/update-notifier/notify-reboot-required r,
+  /usr/share/{update,reboot}-notifier/notify-reboot-required r,
 
   @{run}/reboot-required rw,
   @{run}/reboot-required.pkgs rw,