feat(profiles): general update.

apparmor.d/groups/freedesktop/geoclue

@@ -77,6 +77,7 @@ profile geoclue @{exec_path} flags=(attach_disconnected) {
   @{run}/systemd/journal/socket rw,
 
   @{PROC}/@{pids}/cgroup r,
+  @{PROC}/sys/net/ipv{4,6}/conf/all/disable_ipv{4,6} r,
 
   include if exists <local/geoclue>
 }

apparmor.d/groups/freedesktop/pipewire

@@ -75,7 +75,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
   @{sys}/class/ r,
   @{sys}/devices/**/device:*/**/path r,
   @{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{idVendor,idProduct,removable,uevent} r,
-  @{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name} r,
+  @{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name,bios_vendor} r,
 
   /dev/media[0-9]* rw,
 

apparmor.d/groups/freedesktop/xdg-dbus-proxy

@@ -13,7 +13,7 @@ profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
-  owner @{run}/firejail/dbus/[0-9]*/[0-9]*-user rw,
+  owner @{run}/firejail/dbus/[0-9]*/[0-9]*-{system,user} rw,
   owner @{run}/user/@{uid}/.dbus-proxy/{system,session,a11y}-bus-proxy-[0-9A-Z]* rw,
   owner @{run}/user/@{uid}/webkitgtk/a11y-proxy-[0-9A-Z]* rw,
   owner @{run}/user/@{uid}/webkitgtk/bus-proxy-[0-9A-Z]* rw,