feat(profiles): general update.

apparmor.d/profiles-a-f/aa-log

@@ -21,9 +21,7 @@ profile aa-log @{exec_path} {
   /var/log/audit/* r,
 
   /{run,var}/log/journal/ r,
-  /{run,var}/log/journal/@{hex}/ r,
-  /{run,var}/log/journal/@{hex}/system*.journal r,
-  /{run,var}/log/journal/@{hex}/user*.journal r,
+  /{run,var}/log/journal/@{hex}/{,*} r,
 
   @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
 

apparmor.d/profiles-a-f/dkms

@@ -117,10 +117,14 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
     /etc/depmod.d/{,*} r,
 
     /{usr/,}lib/modules/*/modules.* rw,
-    /var/lib/dkms/**/module/*.ko r,
+    /var/lib/dkms/**/module/*.ko* r,
 
     owner /boot/System.map-* r,
 
+    # Inherit silencer
+    deny /apparmor/.null rw,
+
+    include if exists <local/dkms_kmod>
   }
 
   include if exists <local/dkms>

apparmor.d/profiles-a-f/downloadhelper

@@ -21,6 +21,8 @@ profile downloadhelper @{exec_path} {
 
   @{exec_path} mr,
 
+  /{usr/,}bin/ffmpeg rix,
+
   /opt/ r,
   /opt/net.downloadhelper.coapp/ r,
   /opt/net.downloadhelper.coapp/bin/ r,

apparmor.d/profiles-a-f/fwupd

@@ -53,8 +53,7 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
        member=GetAll,
 
   dbus receive bus=system path=/
-       interface=org.freedesktop.fwupd
-       member=Changed,
+       interface=org.freedesktop.fwupd,
 
   dbus receive bus=system path=/
        interface=org.freedesktop.DBus.Properties