feat(profiles): general update.

apparmor.d/profiles-s-z/spice-vdagent

@@ -12,6 +12,8 @@ profile spice-vdagent @{exec_path} {
   include <abstractions/audio>
   include <abstractions/gtk>
 
+  unix (connect, receive, send) type=stream peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
+
   @{exec_path} mr,
 
   /etc/machine-id r,

apparmor.d/profiles-s-z/sysctl

@@ -10,7 +10,6 @@ include <tunables/global>
 profile sysctl @{exec_path} {
   include <abstractions/base>
 
-  capability mac_admin,
   capability net_admin,
   capability sys_admin,
   capability sys_resource,

apparmor.d/profiles-s-z/update-command-not-found

@@ -19,6 +19,7 @@ profile update-command-not-found @{exec_path} {
   @{exec_path} r,
 
   /{usr/,}bin/python3.[0-9]* r,
+  /{usr/,}lib/ r,
 
   /{usr/,}bin/dpkg            rPx -> child-dpkg,
   /{usr/,}lib/apt/apt-helper  rix,