feat(profile): general update.

apparmor.d/groups/freedesktop/polkit-mate-authentication-agent

@@ -11,13 +11,9 @@ include <tunables/global>
 profile polkit-mate-authentication-agent @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
-  include <abstractions/dri-common>
-  include <abstractions/dri-enumerate>
+  include <abstractions/desktop>
   include <abstractions/fontconfig-cache-read>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
-  include <abstractions/mesa>
+  include <abstractions/graphics>
   include <abstractions/nameservice-strict>
 
   signal (send) set=(term, kill) peer=polkit-agent-helper,
@@ -26,19 +22,15 @@ profile polkit-mate-authentication-agent @{exec_path} {
 
   @{lib}/polkit-[0-9]/polkit-agent-helper-[0-9] rPx,
 
-  /usr/share/X11/xkb/** r,
-
   /var/lib/dbus/machine-id r,
   /etc/machine-id r,
 
-  owner @{HOME}/.Xauthority r,
-
-  owner /dev/tty@{int} rw,
-
         @{PROC}/1/cgroup r,
   owner @{PROC}/@{pid}/cgroup r,
   owner @{PROC}/@{pid}/fd/ r,
 
+  owner /dev/tty@{int} rw,
+
   include if exists <local/polkit-mate-authentication-agent>
 }
 

apparmor.d/groups/freedesktop/xdg-dbus-proxy

@@ -23,7 +23,7 @@ profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
 
   dbus send bus=session path=/org/freedesktop/portal/desktop
        interface=org.freedesktop.portal.Realtime
-       member=MakeThreadRealtimeWithPID
+       member=MakeThread*
        peer=(name=org.freedesktop.portal.Desktop, label=xdg-desktop-portal),
 
   @{exec_path} mr,

apparmor.d/groups/freedesktop/xdg-desktop-portal

@@ -78,8 +78,8 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
 
   /var/lib/gdm{,3}/greeter-dconf-defaults r,
 
-  owner @{user_config_dirs}/xdg-desktop-portal/* r,
         @{user_config_dirs}/kioslaverc r,
+  owner @{user_config_dirs}/xdg-desktop-portal/* r,
 
   owner @{tmp}/icon* rw,
 

apparmor.d/groups/freedesktop/xdg-desktop-portal-hyprland

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2024 odomingao
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -26,10 +27,10 @@ profile xdg-desktop-portal-hyprland @{exec_path} {
   owner /tmp/hypr/\#@{int} rwkl,
   owner /tmp/hypr/hyprland-share-picker.conf* rwkl,
 
-  /sys/devices/virtual/dmi/id/bios_vendor r,
-  /sys/devices/virtual/dmi/id/board_vendor r,
-  /sys/devices/virtual/dmi/id/product_name r,
-  /sys/devices/virtual/dmi/id/sys_vendor r,
+  @{sys}/devices/virtual/dmi/id/bios_vendor r,
+  @{sys}/devices/virtual/dmi/id/board_vendor r,
+  @{sys}/devices/virtual/dmi/id/product_name r,
+  @{sys}/devices/virtual/dmi/id/sys_vendor r,
 
   owner @{PROC}/@{pid}/cmdline r,