feat(profile): small profiles update.

apparmor.d/profiles-m-r/mandb

@@ -30,7 +30,7 @@ profile mandb @{exec_path} flags=(complain) {
   /usr/{,share/}man/{,**} r,
   /usr/local/{,share/}man/{,**} r,
 
-  /usr/share/**/man/man@{int}/*.@{int}.gz r,
+  /usr/share/**/man/man@{u8}/*.@{int}.gz r,
 
   owner @{user_share_dirs}/man/** rwk,
 

apparmor.d/profiles-m-r/metadata-cleaner

@@ -10,7 +10,7 @@ include <tunables/global>
 profile metadata-cleaner @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/dconf-write>
-  include <abstractions/desktop>
+  include <abstractions/gnome-strict>
   include <abstractions/graphics>
   include <abstractions/nameservice-strict>
   include <abstractions/python>
@@ -31,17 +31,17 @@ profile metadata-cleaner @{exec_path} flags=(attach_disconnected) {
   /etc/httpd/conf/mime.types r,
   /etc/mime.types r,
 
-  owner @{tmp}/@{hex64}.png r,
-  owner @{tmp}/@{hex64}.png w,
+  owner @{tmp}/@{hex64}.* rw,
   owner @{tmp}/@{rand8} rw,
-  owner @{tmp}/tmp@{rand4}_*/{,**} rw,
-  owner @{tmp}/tmp@{rand8}/{,**} rw,
+  owner @{tmp}/tmp@{word8} rw,
+  owner @{tmp}/tmp@{word8}/{,**} rw,
 
   @{run}/mount/utab r,
 
   owner @{PROC}/@{pid}/cmdline r,
-  owner @{PROC}/@{pid}/mounts r,
   owner @{PROC}/@{pid}/mountinfo r,
+  owner @{PROC}/@{pid}/mounts r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   deny owner @{user_share_dirs}/gvfs-metadata/* r,
   deny owner @{user_cache_dirs}/thumbnails/** r,

apparmor.d/profiles-m-r/power-profiles-daemon

@@ -34,10 +34,8 @@ profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) {
   @{sys}/bus/platform/devices/ r,
   @{sys}/class/ r,
   @{sys}/class/power_supply/ r,
-  @{sys}/devices/@{pci}/uevent r,
   @{sys}/devices/**/power_supply/*/scope r,
-  @{sys}/devices/**/power_supply/*/uevent r,
-  @{sys}/devices/platform/**/uevent r,
+  @{sys}/devices/**/uevent r,
   @{sys}/devices/system/cpu/*_pstate/{no_turbo,turbo_pct} r,
   @{sys}/devices/system/cpu/*_pstate/status r,
   @{sys}/devices/system/cpu/cpu@{int}/power/energy_perf_bias rw,

apparmor.d/profiles-m-r/remmina

@@ -9,30 +9,31 @@ include <tunables/global>
 @{exec_path} = @{bin}/remmina
 profile remmina @{exec_path} {
   include <abstractions/base>
+  include <abstractions/audio-client>
   include <abstractions/bus-accessibility>
   include <abstractions/bus-session>
   include <abstractions/bus-system>
   include <abstractions/bus/org.a11y>
+  include <abstractions/bus/org.freedesktop.Avahi>
   include <abstractions/bus/org.freedesktop.hostname1>
+  include <abstractions/bus/org.freedesktop.Notifications>
   include <abstractions/bus/org.freedesktop.secrets>
   include <abstractions/bus/org.gtk.Private.RemoteVolumeMonitor>
   include <abstractions/bus/org.kde.StatusNotifierWatcher>
   include <abstractions/dconf-write>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
+  include <abstractions/desktop>
   include <abstractions/ibus>
   include <abstractions/nameservice-strict>
   include <abstractions/ssl_certs>
-  include <abstractions/X-strict>
+  include <abstractions/user-download-strict>
 
   network inet stream,
   network inet6 stream,
   network netlink raw,
 
   #aa:dbus own bus=session name=org.remmina.Remmina
-
-  dbus (send, receive) bus=session path=/org/ayatana/NotificationItem/remmina_icon{,/**}
-       peer=(name="{:*,org.freedesktop.DBus}"),  # all interfaces and members
+  #aa:dbus talk bus=session name=org.ayatana.NotificationItem label=gnome-shell
+  #aa:dbus talk bus=session name=org.gtk.vfs label="gvfsd{,-*}"
 
   @{exec_path} r,
 
@@ -42,14 +43,13 @@ profile remmina @{exec_path} {
   /etc/timezone r,
   /etc/ssh/ssh_config r,
   /etc/ssh/ssh_config.d/{,*} r,
-  /etc/gtk-3.0/settings.ini r,
 
   owner @{HOME}/@{XDG_SSH_DIR}/{,*} r,
 
+  owner @{user_cache_dirs}/org.remmina.Remmina/{,**} rw,
   owner @{user_cache_dirs}/remmina/{,**} rw,
   owner @{user_config_dirs}/autostart/remmina-applet.desktop r,
   owner @{user_config_dirs}/freerdp/known_hosts2 rwk,
-  owner @{user_config_dirs}/gtk-3.0/bookmarks r,
   owner @{user_config_dirs}/remmina/{,**} rw,
   owner @{user_share_dirs}/remmina/{,**} rw,