feat(profile): general update.

apparmor.d/profiles-m-r/mdevctl

@@ -14,11 +14,11 @@ profile mdevctl @{exec_path} {
 
   /etc/mdevctl.d/{,**} r,
 
-  @{PROC}/@{pids}/maps r,
-
   @{sys}/bus/mdev/devices/ r,
   @{sys}/class/mdev_bus/ r,
   @{sys}/devices/@{pci}/mdev_supported_types/{,**} r,
 
+  @{PROC}/@{pids}/maps r,
+
   include if exists <local/mdevctl>
 }

apparmor.d/profiles-m-r/pass

@@ -125,6 +125,7 @@ profile pass @{exec_path} {
     owner @{user_password_store_dirs}/** rwkl -> @{HOME}/.password-store/**,
 
     owner /tmp/.git_vtag_tmp@{rand6} rw,  # For git log --show-signature
+    owner /dev/shm/pass.*/.git_vtag_tmp@{rand6} rw,
 
     include if exists <local/pass_git>
   }

apparmor.d/profiles-m-r/pinentry-gnome3

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/pinentry-gnome3
 profile pinentry-gnome3 @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   signal (receive) set=(int) peer=gpg-agent,