feat(profiles): general update.

apparmor.d/profiles-s-z/steam

@@ -61,6 +61,7 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
   /{usr/,}bin/ldd                    rix,
   /{usr/,}bin/ln                     rix,
   /{usr/,}bin/lsb_release            rPx -> lsb_release,
+  /{usr/,}bin/lsof                   rix,
   /{usr/,}bin/lspci                  rCx -> lspci,
   /{usr/,}bin/mkdir                  rix,
   /{usr/,}bin/mv                     rix,

apparmor.d/profiles-s-z/sudo

@@ -38,6 +38,7 @@ profile sudo @{exec_path} {
   signal (send) peer=unconfined,
   signal (send) set=(cont,hup) peer=su,
   signal (send) set=winch peer={apt,zsysd,zsys-system-autosnapshot},
+  signal (send,receive) peer=cockpit-bridge,
 
   dbus send bus=system path=/org/freedesktop/login[0-9]
        interface=org.freedesktop.login[0-9].Manager

apparmor.d/profiles-s-z/swtpm

@@ -21,6 +21,9 @@ profile swtpm @{exec_path} {
   /var/log/swtpm/libvirt/qemu/*-swtpm.log  w,
 
   /tmp/.swtpm_setup.pidfile.* rw,
+  /tmp/[0-9]*/.lock rwk,
+  /tmp/[0-9]*/TMP* rw,
+  /tmp/[0-9]*/vtpm.sock rw,
 
   @{run}/libvirt/qemu/swtpm/*.sock w,
   @{run}/libvirt/qemu/swtpm/*.pid w,