Unbreak Debian 11 and partially Ubuntu 22.04 (Wayland+GDM+Gnome) (#81)

* Unbreaking Debian 11 and partially Ubuntu 22.04

* pre-cleanup

* pre-cleanup2

* Update im-launch

* Update gnome-extension-ding

* polishing

* not yet

* Update ubuntu.flags

Allow GDM to boot. `No new privs` fix.

* Update debian.flags

Allow GDM to boot. `No new privs` fix.

* Update CONTRIBUTING.md

* fixes

* reverting w

* move setpriv to main.flags

apparmor.d/groups/ubuntu/check-new-release-gtk

@@ -25,6 +25,11 @@ profile check-new-release-gtk @{exec_path} {
   network inet6 stream,
   network netlink raw,
 
+  dbus send bus=session path=/org/a11y/bus
+       interface=org.a11y.Bus
+       member=GetAddress
+       peer=(name=org.a11y.Bus), # all peer's labels
+
   @{exec_path} mr,
 
   /{usr/,}bin/dpkg         rPx,
@@ -38,10 +43,13 @@ profile check-new-release-gtk @{exec_path} {
   /usr/share/ubuntu-release-upgrader/{,**} r,
   /usr/share/update-manager/{,**} r,
   /usr/share/X11/xkb/{,**} r,
+  /usr/share/dconf/profile/gdm r,
 
   /etc/update-manager/{,**} r,
 
   /var/lib/update-manager/{,**} rw,
+  /var/lib/gdm{3,}/greeter-dconf-defaults r,
+  /var/lib/gdm{3,}/.cache/update-manager-core/meta-release-lts rw,
 
   owner @{user_cache_dirs}/update-manager-core/{,**} rw,
 
@@ -52,4 +60,4 @@ profile check-new-release-gtk @{exec_path} {
         @{PROC}/@{pids}/mounts r,
 
   include if exists <local/check-new-release-gtk>
-}
+}