Update profiles.

apparmor.d/profiles-s-z/spice-client-glib-usb-acl-helper

@@ -13,6 +13,8 @@ profile spice-client-glib-usb-acl-helper @{exec_path} {
   capability sys_ptrace,
   capability fowner,
 
+  ptrace (read) peer=virt-manager,
+
   @{exec_path} mr,
 
   /{usr/,}lib/gconv/gconv-modules r,

apparmor.d/profiles-s-z/sudo

@@ -15,11 +15,11 @@ profile sudo @{exec_path} {
   include <abstractions/wutmp>
 # include <pam/mappings>
 
-  # capability mknod,
   capability audit_write,
   capability chown,
   capability dac_override,
   capability dac_read_search,
+  capability mknod,
   capability net_admin,
   capability setgid,
   capability setuid,

apparmor.d/profiles-s-z/virt-manager

@@ -66,6 +66,7 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
   owner @{user_cache_dirs}/ rw,
   owner @{user_cache_dirs}/virt-manager/ rw,
   owner @{user_cache_dirs}/virt-manager/** rw,
+  owner @{user_share_dirs}/gvfs-metadata/{,*} r,
 
   # For disk images
   @{MOUNTS}/ r,

apparmor.d/profiles-s-z/xdg-desktop-portal-gtk

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/xdg-desktop-portal-gtk
 profile xdg-desktop-portal-gtk @{exec_path} {
   include <abstractions/base>
+  include <abstractions/fontconfig-cache-write>
   include <abstractions/fonts>
   include <abstractions/freedesktop.org>
   include <abstractions/gtk>

apparmor.d/profiles-s-z/xdg-permission-store

@@ -10,7 +10,8 @@ include <tunables/global>
 profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
 
-  signal (receive) set=(term) peer=gdm,
+  signal (receive) set=(term hup kill) peer=dbus-daemon,
+  signal (receive) set=(term hup kill) peer=gdm*,
 
   @{exec_path} mr,