feat(profiles): general update.

apparmor.d/groups/freedesktop/pipewire-media-session

@@ -29,27 +29,33 @@ profile pipewire-media-session @{exec_path} {
   /etc/pipewire/*.conf r,
   /etc/pipewire/media-session.d/*.conf r,
 
+  /var/lib/gdm/.local/state/pipewire/media-session.d/* rw,
+
   owner @{HOME}/.local/state/ rw,
   owner @{HOME}/.local/state/pipewire/{,**} rw,
   owner @{user_config_dirs}/pipewire/ rw,
   owner @{user_config_dirs}/pipewire/** rw,
   owner @{user_config_dirs}/pulse/ rw,
 
+  owner @{run}/user/@{uid}/bus rw,
+  owner @{run}/user/@{uid}/pipewire-[0-9]* rw,
+
   @{run}/udev/data/+sound:card[0-9]* r, # For sound
   @{run}/udev/data/c116:[0-9]* r,       # for ALSA
 
+  @{run}/systemd/users/@{uid} r,
+
   @{sys}/class/sound/ r,
   @{sys}/class/video4linux/ r,
-
   @{sys}/devices/**/sound/**/uevent r,
+  @{sys}/devices/pci[0-9]*/**/modalias r,
+  @{sys}/devices/pci[0-9]*/**/sound/**/pcm_class r,
   @{sys}/devices/pci[0-9]*/**/video4linux/video[0-9]*/uevent r,
   @{sys}/devices/system/node/ r,
   @{sys}/devices/system/node/node[0-9]*/meminfo r,
-  @{sys}/devices/pci[0-9]*/**/modalias r,
-
-  @{run}/systemd/users/@{uid} r,
 
   /dev/video[0-9]* rw,
+  /dev/snd/ r,
 
   include if exists <local/pipewire-media-session>
 }

apparmor.d/groups/freedesktop/pulseaudio

@@ -10,10 +10,12 @@ include <tunables/global>
 @{exec_path} = /{usr/,}bin/pulseaudio
 profile pulseaudio @{exec_path} {
   include <abstractions/base>
-  include <abstractions/consoles>
   include <abstractions/audio>
-  include <abstractions/dbus-strict>
+  include <abstractions/consoles>
   include <abstractions/dbus-session-strict>
+  include <abstractions/dbus-strict>
+  include <abstractions/dri-common>
+  include <abstractions/dri-enumerate>
   include <abstractions/nameservice-strict>
 
   ptrace (trace) peer=@{profile_name},
@@ -29,8 +31,9 @@ profile pulseaudio @{exec_path} {
 
   @{exec_path} mrix,
 
-  /{usr/,}lib/@{multiarch}/pulse/gconf-helper mrix,
   /{usr/,}lib{exec,}/pulse/gsettings-helper mrix,
+  /{usr/,}lib/@{multiarch}/gstreamer1.0/gstreamer-1.0/gst-plugin-scanner mrix,
+  /{usr/,}lib/@{multiarch}/pulse/gconf-helper mrix,
 
   # PulseAudio files
   /usr/share/pulseaudio/{,**} r,
@@ -40,6 +43,8 @@ profile pulseaudio @{exec_path} {
   owner @{user_config_dirs}/pulse/{,**} rw,
   owner @{user_config_dirs}/dconf/user r,
 
+  owner @{user_cache_dirs}/gstreamer-1.0/registry.x86_64.bin r,
+
   # Needed when PulseAudio is started via the start-pulseaudio-x11 script
   owner @{HOME}/.Xauthority r,
 
@@ -80,6 +85,7 @@ profile pulseaudio @{exec_path} {
 
   owner @{PROC}/@{pids}/fd/ r,
   owner @{PROC}/@{pids}/stat r,
+  owner @{PROC}/@{pids}/cmdline r,
 
   # DBus
   dbus (send)