feat(profile): general update.

apparmor.d/groups/freedesktop/polkitd

@@ -64,6 +64,8 @@ profile polkitd @{exec_path} flags=(attach_disconnected) {
   @{PROC}/cmdline r,
   @{PROC}/sys/kernel/osrelease r,
 
+  owner @{PROC}/@{pid}/fdinfo/@{int} r,
+
   # Silencer
   deny /.cache/ rw,
 

apparmor.d/groups/freedesktop/update-desktop-database

@@ -37,6 +37,8 @@ profile update-desktop-database @{exec_path} flags=(attach_disconnected) {
   owner @{user_share_dirs}/.mimeinfo.cache.* rw,
   owner @{user_share_dirs}/{,**/} r,
   owner @{user_share_dirs}/**.desktop r,
+  owner @{user_share_dirs}/applications/.mimeinfo.cache.* rw,
+  owner @{user_share_dirs}/applications/mimeinfo.cache w,
   owner @{user_share_dirs}/mimeinfo.cache w,
 
   # Inherit silencer

apparmor.d/groups/freedesktop/xdg-icon-resource

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2018-2021 Mikhail Morfikov
+# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -7,7 +8,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/xdg-icon-resource
-profile xdg-icon-resource @{exec_path} flags=(complain) {
+profile xdg-icon-resource @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>

apparmor.d/groups/freedesktop/xdg-user-dir

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/xdg-user-dir
-profile xdg-user-dir @{exec_path} {
+profile xdg-user-dir @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
 
   @{exec_path} mr,