feat(profiles): general update.

apparmor.d/groups/freedesktop/at-spi2-registryd

@@ -90,6 +90,7 @@ profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
   owner @{HOME}/.xsession-errors w,
 
   owner /tmp/runtime-*/xauth_?????? r,
+  owner /tmp/xauth_?????? r,
 
   owner @{run}/user/@{uid}/gdm/Xauthority r,
   owner @{run}/user/@{uid}/xauth_?????? r,

apparmor.d/groups/freedesktop/fc-cache

@@ -14,6 +14,8 @@ profile fc-cache @{exec_path} {
   include <abstractions/fontconfig-cache-write>
   include <abstractions/fonts>
 
+  capability dac_read_search,
+
   @{exec_path} mr,
 
   /var/cache/fontconfig/{,**} rw,

apparmor.d/groups/freedesktop/fc-list

@@ -13,6 +13,8 @@ profile fc-list @{exec_path} {
   include <abstractions/fonts>
   include <abstractions/fontconfig-cache-read>
 
+  capability dac_read_search,
+
   @{exec_path} mr,
 
   include if exists <local/fc-list>

apparmor.d/groups/freedesktop/pipewire-media-session

@@ -72,6 +72,8 @@ profile pipewire-media-session @{exec_path} {
   @{sys}/devices/system/node/ r,
   @{sys}/devices/system/node/node[0-9]*/meminfo r,
 
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
+
   /dev/video[0-9]* rw,
   /dev/snd/ r,
 

apparmor.d/groups/freedesktop/polkit-agent-helper

@@ -47,6 +47,7 @@ profile polkit-agent-helper @{exec_path} {
 
         @{PROC}/1/cgroup r,
   owner @{PROC}/@{pid}/cgroup r,
+  owner @{PROC}/@{pid}/loginuid r,
 
   owner /dev/tty[0-9]* rw,
 

apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk

@@ -165,6 +165,7 @@ profile xdg-desktop-portal-gtk @{exec_path} {
   owner @{HOME}/@{XDG_DATA_HOME}/ r,
 
   owner /tmp/runtime-*/xauth_?????? r,
+  owner /tmp/xauth_?????? r,
 
         @{run}/mount/utab r,
         @{run}/user/@{uid}/xauth_* rl,

apparmor.d/groups/freedesktop/xdg-desktop-portal-kde

@@ -45,6 +45,8 @@ profile xdg-desktop-portal-kde @{exec_path} {
   owner @{user_config_dirs}/kwinrc r,
   owner @{user_config_dirs}/xdg-desktop-portal-kderc r,
 
+  owner /tmp/xauth_?????? r,
+
   @{run}/user/@{uid}/xauth_* rl,
 
   @{PROC}/sys/kernel/core_pattern r,

apparmor.d/groups/freedesktop/xprop

@@ -20,6 +20,8 @@ profile xprop @{exec_path} {
   owner @{HOME}/.icons/default/index.theme r,
   
   owner /tmp/runtime-*/xauth_?????? r,
+  owner /tmp/xauth_?????? r,
+
   owner @{run}/user/@{uid}/xauth_* rl,
 
   # file_inherit