feat(profiles): general update.

apparmor.d/groups/gnome/gdm

@@ -96,6 +96,10 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
   @{run}/systemd/sessions/*     r,
   @{run}/systemd/sessions/*.ref r,
   @{run}/systemd/users/@{uid} r,
+
+  @{run}/udev/data/+drm:card[0-9]-* r,
+  @{run}/udev/data/+pci* r,
+  @{run}/udev/data/c226:[0-9]* r,      # for /dev/dri/card*
   @{run}/udev/tags/master-of-seat/ r,
 
   @{sys}/devices/**/uevent r,

apparmor.d/groups/gnome/gnome-control-center-goa-helper

@@ -39,6 +39,8 @@ profile gnome-control-center-goa-helper @{exec_path} {
 
   /var/lib/flatpak/exports/share/icons/{,**} r,
 
+  owner @{user_config_dirs}/goa-1.0/accounts.conf r,
+
   owner @{user_cache_dirs}/gnome-control-center-goa-helper/{,**} rwl,
 
   owner @{user_share_dirs}/webkitgtk/{,**} rw,
@@ -48,9 +50,10 @@ profile gnome-control-center-goa-helper @{exec_path} {
 
   owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/app.slice/app-gnome-org.gnome.Settings-[0-9]*.scope/memory.* r,
 
+        @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,
+        @{PROC}/zoneinfo r,
   owner @{PROC}/@{pid}/cgroup r,
   owner @{PROC}/@{pid}/cmdline r,
-        @{PROC}/zoneinfo r,
 
   include if exists <local/gnome-control-center-goa-helper>
 }

apparmor.d/groups/gnome/goa-daemon

@@ -70,5 +70,7 @@ profile goa-daemon @{exec_path} {
   owner @{user_config_dirs}/goa-1.0/ rw,
   owner @{user_config_dirs}/goa-1.0/accounts.conf* rw,
 
+  @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,
+
   include if exists <local/goa-daemon>
 }

apparmor.d/groups/gnome/gsd-media-keys

@@ -187,9 +187,12 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
 
   owner /dev/tty[0-9]* rw,
 
-  @{run}/udev/data/c13:[0-9]* r,      # for /dev/input/*
+  @{run}/udev/data/+sound:card[0-9]* r, # For sound
+  @{run}/udev/data/c13:[0-9]* r,        # for /dev/input/*
+  @{run}/udev/data/c189:[0-9]* r,       # For /dev/bus/usb/**
 
   @{sys}/devices/**/usb[0-9]/{,**} r,
+  @{sys}/devices/pci[0-9]*/**/sound/**/uevent r,
   @{sys}/devices/platform/**/uevent r,
   @{sys}/devices/virtual/**/uevent r,
 

apparmor.d/groups/gnome/gsd-power

@@ -186,6 +186,7 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
   owner @{run}/user/@{uid}/gdm/Xauthority r,
 
   @{run}/udev/data/+backlight:* r,
+  @{run}/udev/data/+drm:card* r,
   @{run}/udev/data/+leds:*backlight* r,
 
   @{run}/systemd/inhibit/[0-9]*.ref rw,

apparmor.d/groups/gnome/gsd-rfkill

@@ -88,9 +88,9 @@ profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
 
   @{sys}/devices/virtual/misc/rfkill/uevent r,
 
-  /dev/rfkill rw,
-
   owner /dev/tty[0-9]* rw,
 
+  /dev/rfkill rw,
+
   include if exists <local/gsd-rfkill>
 }