feat(profiles): general update.

apparmor.d/profiles-s-z/snap

@@ -26,6 +26,10 @@ profile snap @{exec_path} {
          member={StartTransientUnit,JobRemoved}
          peer=(name=:*, label=unconfined),
 
+  dbus (send, receive) bus=system path=/org/freedesktop/
+         interface=org.freedesktop.systemd1.Manager
+         member={StartTransientUnit,JobRemoved},
+
   dbus send bus=session path=/org/freedesktop/portal/documents
        interface=org.freedesktop.portal.Documents
        member=GetMountPoint
@@ -35,6 +39,7 @@ profile snap @{exec_path} {
 
   /{usr/,}bin/mount rix,
 
+  /{usr/,}bin/gpg{,2}          rCx -> gpg,
   /{usr/,}bin/systemctl        rPx -> child-systemctl,
 
   /snap/{,**} rw,
@@ -77,5 +82,19 @@ profile snap @{exec_path} {
 
   deny @{user_share_dirs}/gvfs-metadata/* r,
 
+  profile gpg {
+    include <abstractions/base>
+
+    /{usr/,}bin/gpg{,2} mr,
+
+    /{usr/,}bin/dirmngr           rix,
+    /{usr/,}bin/gpg-agent         rix,
+    /{usr/,}bin/gpg-connect-agent rix,
+
+    owner @{HOME}/.snap/gnupg/ rw,
+    owner @{HOME}/.snap/gnupg/** rwkl,
+
+  }
+
   include if exists <local/snap>
 }