Update profile from #25.

apparmor.d/profiles-s-z/sudo

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -42,12 +43,12 @@ profile sudo @{exec_path} {
   /{usr/,}{s,}bin/[a-z0-9]*           rPUx,
   /{usr/,}lib/cockpit/cockpit-askpass rPUx,
 
+  /etc/environment r,
+  /etc/machine-id r,
+  /etc/security/limits.d/{,*} r,
   /etc/sudo.conf r,
-
   /etc/sudoers r,
   /etc/sudoers.d/{,*} r,
-  /etc/environment r,
-  /etc/security/limits.d/{,*} r,
 
   /var/log/sudo.log wk,
 

apparmor.d/profiles-s-z/wireplumber

@@ -24,6 +24,7 @@ profile wireplumber @{exec_path} {
   /usr/share/spa-*/bluez[0-9]*/{,*} r,
   /usr/share/wireplumber/{,**} r,
 
+  owner @{HOME}/.local/state/ w,
   owner @{HOME}/.local/state/wireplumber/{,**} rw,
 
   @{run}/systemd/users/@{uid} r,