feat(profile): small profiles update.

apparmor.d/groups/gnome/gio-launch-desktop

@@ -43,7 +43,6 @@ profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
 
   /dev/dri/card@{int} rw,
 
-  deny @{user_share_dirs}/gvfs-metadata/{,*} r,
 
   include if exists <local/gio-launch-desktop>
 }

apparmor.d/groups/gnome/gnome-characters

@@ -24,6 +24,7 @@ profile gnome-characters @{exec_path} {
   @{open_path} rPx -> child-open-help,
 
   /usr/share/org.gnome.Characters/{,**} r,
+  /usr/share/xml/iso-codes/{,**} r,
 
   owner @{PROC}/@{pid}/mounts r,
   owner @{PROC}/@{pid}/stat r,

apparmor.d/groups/gnome/gnome-extension-manager

@@ -32,6 +32,7 @@ profile gnome-extension-manager @{exec_path} {
 
         @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,
   owner @{PROC}/@{pid}/cmdline r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   # Silencer
   deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,

apparmor.d/groups/gnome/gnome-software

@@ -125,6 +125,7 @@ profile gnome-software @{exec_path} {
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/fdinfo/@{int} r,
   owner @{PROC}/@{pid}/stat r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   /dev/fuse rw,