Profile update.

apparmor.d/profiles-s-z/usbguard-applet-qt

@@ -34,7 +34,6 @@ profile usbguard-applet-qt @{exec_path} {
   owner @{run}/user/@{uid}/sni-qt_usbguard-applet-qt_[0-9]*-[a-zA-Z0-9]*/{,**} rw,
 
   owner @{PROC}/@{pid}/cmdline r,
-        @{PROC}/sys/kernel/random/boot_id r,
         @{PROC}/sys/kernel/core_pattern r,
 
   /usr/share/hwdata/pnp.ids r,

apparmor.d/profiles-s-z/xdg-desktop-portal

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}lib/xdg-desktop-portal
-profile xdg-desktop-portal @{exec_path} {
+profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
   include <abstractions/freedesktop.org>
@@ -22,6 +22,9 @@ profile xdg-desktop-portal @{exec_path} {
 
   /{usr/,}lib/x r,
 
+  / r,
+  /.flatpak-info r,
+
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/pipewire/client.conf r,
   /usr/share/xdg-desktop-portal/portals/{,*.portal} r,

apparmor.d/profiles-s-z/xdg-desktop-portal-gnome

@@ -17,7 +17,6 @@ profile xdg-desktop-portal-gnome @{exec_path} {
   @{exec_path} mr,
 
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
-  /usr/share/themes/{,**} r,
   /usr/share/X11/xkb/{,**} r,
 
   owner @{run}/user/@{uid}/wayland-cursor-shared-* rw,

apparmor.d/profiles-s-z/xdg-desktop-portal-gtk

@@ -15,20 +15,26 @@ profile xdg-desktop-portal-gtk @{exec_path} {
   include <abstractions/gtk>
   include <abstractions/thumbnails-cache-read>
   include <abstractions/user-download>
+  include <abstractions/user-write>
 
   @{exec_path} mr,
 
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
-  /usr/share/themes/{,**} r,
   /usr/share/X11/xkb/{,**} r,
 
   / r,
 
+  owner @{HOME}/ r,
+  owner @{HOME}/.* r,
   owner @{HOME}/@{XDG_DATA_HOME}/ r,
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
 
   include <abstractions/dconf>
   owner @{run}/user/@{uid}/dconf/user rw,
 
+  @{run}/mount/utab r,
+
+  owner @{PROC}/@{uid}/mountinfo r,
+
   include if exists <local/xdg-desktop-portal-gtk>
 }