feat(profile): general update.

apparmor.d/profiles-a-f/aa-enforce

@@ -29,8 +29,8 @@ profile aa-enforce @{exec_path} {
   owner /snap/core@{int}/@{int}/etc/apparmor.d/{,**} rw,
   owner /var/lib/snapd/apparmor/{,**} rw,
 
-  /tmp/@{rand8} rw,
-  /tmp/apparmor-bugreport-@{rand8}.txt rw,
+  owner @{tmp}/@{rand8} rw,
+  owner @{tmp}/apparmor-bugreport-@{rand8}.txt rw,
 
   owner @{PROC}/@{pid}/fd r,
 

apparmor.d/profiles-a-f/aa-notify

@@ -35,7 +35,7 @@ profile aa-notify @{exec_path} {
   owner @{HOME}/.terminfo/@{int}/dumb r,
 
   owner @{tmp}/@{rand8} rw,
-  owner @{tmp}/apparmor-bugreport-*.txt rw,
+  owner @{tmp}/apparmor-bugreport-@{rand8}.txt rw,
 
   @{PROC}/ r,
   @{PROC}/@{pid}/stat r,

apparmor.d/profiles-a-f/calibre

@@ -94,6 +94,7 @@ profile calibre @{exec_path} {
         @{PROC}/ r,
         @{PROC}/@{pids}/net/route r,
         @{PROC}/sys/fs/inotify/max_user_watches r,
+        @{PROC}/sys/kernel/random/boot_id r,
         @{PROC}/sys/kernel/yama/ptrace_scope r,
         @{PROC}/vmstat r,
   owner @{PROC}/@{pid}/cmdline r,
@@ -102,24 +103,10 @@ profile calibre @{exec_path} {
   owner @{PROC}/@{pid}/mountinfo r,
   owner @{PROC}/@{pid}/mounts r,
   owner @{PROC}/@{pid}/oom_{,score_}adj rw,
-       owner @{PROC}/@{pid}/stat{,m} r,
-       owner @{PROC}/@{pid}/stat{,m} r,
-       owner @{PROC}/@{pid}/comm r,
   owner @{PROC}/@{pid}/stat{,m} r,
-       owner @{PROC}/@{pid}/comm r,
   owner @{PROC}/@{pid}/task/ r,
   owner @{PROC}/@{pid}/task/@{tid}/comm rw,
-       owner @{PROC}/@{pid}/task/@{tid}/status r,
-       owner @{PROC}/@{pid}/task/@{tid}/status r,
-       owner @{PROC}/@{pid}/task/@{tid}/comm rw,
-  deny owner @{PROC}/@{pid}/cmdline r,
-  deny owner @{PROC}/@{pid}/oom_{,score_}adj rw,
-  deny       @{PROC}/sys/kernel/random/boot_id r,
   owner @{PROC}/@{pid}/task/@{tid}/status r,
-       owner @{PROC}/@{pid}/task/@{tid}/comm rw,
-  deny owner @{PROC}/@{pid}/cmdline r,
-  deny owner @{PROC}/@{pid}/oom_{,score_}adj rw,
-  deny       @{PROC}/sys/kernel/random/boot_id r,
 
   owner /dev/tty@{int} rw,
 

apparmor.d/profiles-a-f/filezilla

@@ -13,6 +13,7 @@ profile filezilla @{exec_path} {
   include <abstractions/bus-session>
   include <abstractions/bus/org.freedesktop.Notifications>
   include <abstractions/bus/org.gnome.SessionManager>
+  include <abstractions/dconf-write>
   include <abstractions/desktop>
   include <abstractions/fontconfig-cache-read>
   include <abstractions/nameservice-strict>
@@ -27,7 +28,7 @@ profile filezilla @{exec_path} {
   network netlink dgram,
   network netlink raw,
 
-  signal (send) set=(term, kill) peer=fzsftp,
+  signal send set=(term, kill) peer=fzsftp,
 
   @{exec_path} mr,
 
@@ -65,6 +66,7 @@ profile filezilla @{exec_path} {
   owner @{PROC}/@{pid}/mountinfo r,
   owner @{PROC}/@{pid}/mounts r,
 
+        /dev/tty rw,
   owner /dev/tty@{int} rw,
 
   include if exists <local/filezilla>

apparmor.d/profiles-a-f/freetube

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{name} = {F,f}reetube{,-vue}
+@{name} = {F,f}ree{T,t}ube{,-vue}
 @{lib_dirs} = @{lib}/@{name} /opt/@{name} 
 @{config_dirs} = @{user_config_dirs}/@{name}
 @{cache_dirs} = @{user_cache_dirs}/@{name}
@@ -16,11 +16,11 @@ include <tunables/global>
 profile freetube @{exec_path} {
   include <abstractions/base>
   include <abstractions/audio-client>
+  include <abstractions/bus-session>
   include <abstractions/bus/org.freedesktop.ScreenSaver>
   include <abstractions/bus/org.gnome.SessionManager>
   include <abstractions/common/electron>
   include <abstractions/consoles>
-  include <abstractions/thumbnails-cache-read>
   include <abstractions/user-download-strict>
 
   network inet dgram,
@@ -35,13 +35,8 @@ profile freetube @{exec_path} {
 
   @{open_path}         rPx -> child-open-strict,
 
-  /etc/fstab r,
-  /etc/machine-id r,
-  /var/lib/dbus/machine-id r,
-
-  owner @{run}/user/@{uid}/ r,
-
-  owner /dev/tty@{int} rw,
+  #aa:stack X xdg-settings
+  @{bin}/xdg-settings  rPx -> freetube//&xdg-settings,
 
   include if exists <local/freetube>
 }