feat(profile): general update.

apparmor.d/profiles-s-z/signal-desktop

@@ -31,11 +31,13 @@ profile signal-desktop @{exec_path} {
 
   @{exec_path} mrix,
 
-  @{bin}/basename      rix,
+  # @{bin}/basename      rix,
   @{bin}/getconf       rix,
-  @{bin}/xdg-settings  rix,
   @{open_path} rPx -> child-open-strict,
 
+  #aa:stack X xdg-settings
+  @{bin}/xdg-settings  rPx -> signal-desktop//&xdg-settings,
+
   audit @{lib_dirs}/chrome-sandbox rPx,
   @{lib_dirs}/chrome_crashpad_handler rix,
 

apparmor.d/profiles-s-z/telegram-desktop

@@ -26,6 +26,7 @@ profile telegram-desktop @{exec_path} {
   include <abstractions/qt5-shader-cache>
   include <abstractions/ssl_certs>
   include <abstractions/user-download-strict>
+  include <abstractions/video>
 
   network inet dgram,
   network inet6 dgram,
@@ -47,10 +48,13 @@ profile telegram-desktop @{exec_path} {
   owner @{tmp}/@{hex32}-?@{uuid}? rwk,
   audit owner /dev/shm/#@{int} rw,
 
+  @{sys}/kernel/mm/transparent_hugepage/enabled r,
+
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/mountinfo r,
   owner @{PROC}/@{pid}/mounts r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   owner /dev/tty@{int} rw,
 

apparmor.d/profiles-s-z/udisksctl

@@ -10,6 +10,10 @@ include <tunables/global>
 @{exec_path} = @{bin}/udisksctl
 profile udisksctl @{exec_path} {
   include <abstractions/base>
+  include <abstractions/bus-system>
+  include <abstractions/consoles>
+
+  #aa:dbus talk bus=system name=org.freedesktop.UDisks2 label=udisksd
 
   @{exec_path} mr,
 

apparmor.d/profiles-s-z/waybar

@@ -22,15 +22,22 @@ profile waybar @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  /etc/machine-id r,
+
   owner @{user_config_dirs}/waybar/{,**} r,
 
   @{sys}/devices/virtual/dmi/id/bios_vendor r,
   @{sys}/devices/virtual/dmi/id/board_vendor r,
   @{sys}/devices/virtual/dmi/id/product_name r,
   @{sys}/devices/virtual/dmi/id/sys_vendor r,
+  @{sys}/devices/system/cpu/present r,
 
+        @{PROC}/@{pid}/net/dev r,
+        @{PROC}/spl/kstat/zfs/arcstats r,
   owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
+  /dev/rfkill r,
+
   owner /dev/tty@{int} rw,
 
   include if exists <local/waybar>