xfce, updates

apparmor.d/profiles-s-z/su

@@ -27,6 +27,8 @@ profile su @{exec_path} {
   @{bin}/nologin       rPx,
 
   @{etc_ro}/default/su r,
+  /etc/default/locale r,
+  /etc/environment r,
 
   @{HOME}/.xauth@{rand6} rw,
 

apparmor.d/profiles-s-z/system-config-printer-applet

@@ -10,6 +10,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/system-config-printer-applet /usr/share/system-config-printer/applet.py
 profile system-config-printer-applet @{exec_path} {
   include <abstractions/base>
+  include <abstractions/bus-session>
   include <abstractions/python>
   include <abstractions/nameservice-strict>
 
@@ -29,6 +30,8 @@ profile system-config-printer-applet @{exec_path} {
 
   /dev/tty rw,
 
+  deny @{lib}/python3/dist-packages/cupshelpers/__pycache__/** w,
+
   include if exists <local/system-config-printer-applet>
 }
 

apparmor.d/profiles-s-z/xarchiver

@@ -55,6 +55,7 @@ profile xarchiver @{exec_path} {
         /home/ r,
   #owner @{HOME}/ r,
   #owner @{HOME}/** rw,
+  owner @{HOME}/@{XDG_DOWNLOAD_DIR}/{,**} rwl,
         @{MOUNTS}/ r,
         @{MOUNTS}/** rw,
         /tmp/ r,