feat(profile): update profiles for gnome 47.

apparmor.d/groups/gnome/gnome-control-center

@@ -103,6 +103,8 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   /var/cache/samba/ rw,
   /var/lib/AccountsService/icons/* r,
 
+  / r,
+
   owner @{HOME}/.cat_installer/ca.pem r,
   owner @{HOME}/.cert/nm-openvpn/*.pem r,
   owner @{HOME}/.face r,

apparmor.d/groups/gnome/gnome-control-center-print-renderer

@@ -24,6 +24,7 @@ profile gnome-control-center-print-renderer @{exec_path} {
   / r,
 
   owner @{PROC}/@{pid}/cmdline r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   include if exists <local/gnome-control-center-print-renderer>
 }

apparmor.d/groups/gnome/gnome-shell

@@ -409,6 +409,8 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
     /usr/local/bin/**             PUx,
     /usr/games/**                 PUx,
 
+    owner @{user_share_dirs}/gnome-shell/session.gvdb rw,
+
     owner @{run}/user/@{uid}/gnome-shell-disable-extensions w, 
 
     deny @{user_share_dirs}/gvfs-metadata/* r,

apparmor.d/groups/gnome/loupe

@@ -40,6 +40,7 @@ profile loupe @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/cgroup r,
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/mountinfo r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   deny @{user_share_dirs}/gvfs-metadata/* r,
 

apparmor.d/groups/gnome/nautilus

@@ -110,6 +110,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/mountinfo r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   /dev/tty rw,