feat(profiles): general update.

apparmor.d/profiles-s-z/which

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/which{.debianutils,}
-profile which @{exec_path} flags=(complain) {
+profile which @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 
@@ -28,5 +28,7 @@ profile which @{exec_path} flags=(complain) {
   owner @{HOME}/.krew/bin/ r,
   owner @{HOME}/go/bin/ r,
 
+  deny @{user_share_dirs}/gvfs-metadata/* r,
+
   include if exists <local/which>
 }

apparmor.d/profiles-s-z/wireplumber

@@ -21,6 +21,9 @@ profile wireplumber @{exec_path} {
 
   @{exec_path} mr,
 
+  /opt/intel/oneapi/{compiler,lib,mkl}/**/ r,
+  /opt/intel/oneapi/{compiler,lib,mkl}/**.so* mr,
+
   /etc/machine-id r,
 
   /usr/share/alsa-card-profile/{,**} r,