feat(profile): general update.

apparmor.d/profiles-s-z/spotify

@@ -41,9 +41,15 @@ profile spotify @{exec_path} {
   owner @{cache_dirs}/WidevineCdm/**/libwidevinecdm.so rm,
   owner @{config_dirs}/*/WidevineCdm/**/libwidevinecdm.so rm,
 
+  owner @{tmp}/.org.chromium.Chromium.@{rand6}/*.crx3 rw,
+
+  @{PROC}/pressure/* r,
+
   /dev/tty rw,
 
   deny @{user_share_dirs}/gvfs-metadata/* r,
+  deny @{sys}/class/*/ r,
+  deny owner @{PROC}/@{pid}/clear_refs w,
 
   include if exists <local/spotify>
 }