feat(dbus): update dbus rules.

apparmor.d/groups/freedesktop/pipewire

@@ -22,9 +22,10 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
 
   network netlink raw,
 
+  dbus bind bus=session name=org.pulseaudio.Server,
+
   dbus send bus=session path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus
-       member=GetConnectionUnixProcessID
        peer=(name=org.freedesktop.DBus, label=dbus-daemon),
 
   dbus send bus=system path=/org/freedesktop/RealtimeKit[0-9]

apparmor.d/groups/freedesktop/upowerd

@@ -31,6 +31,16 @@ profile upowerd @{exec_path} flags=(attach_disconnected) {
        interface=org.freedesktop.login[0-9].Manager
        member=Inhibit,
 
+  dbus send bus=system path=/
+       interface=org.freedesktop.DBus.ObjectManager
+       member=GetManagedObjects 
+       peer=(name=:*, label=bluetoothd),
+
+  dbus receive bus=system path=/org/bluez/hci0
+       interface=org.freedesktop.DBus.Properties
+       member=PropertiesChanged 
+       peer=(name=:*, label=bluetoothd),
+
   dbus receive bus=system path=/org/freedesktop/login[0-9]
        interface=org.freedesktop.login[0-9].Manager
        member={UserNew,UserRemoved,SessionNew,SessionRemoved,PrepareForShutdown,PrepareForSleep}
@@ -41,8 +51,7 @@ profile upowerd @{exec_path} flags=(attach_disconnected) {
        member=PropertiesChanged
        peer=(name=:*),
 
-  dbus bind bus=system 
-       name=org.freedesktop.UPower,
+  dbus bind bus=system name=org.freedesktop.UPower,
 
   @{exec_path} mr,
 

apparmor.d/groups/freedesktop/xdg-document-portal

@@ -36,9 +36,9 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
   dbus receive bus=session path=/org/freedesktop/portal/documents
        interface=org.freedesktop.portal.Documents
        member=GetMountPoint
-       peer=(name=:*, label="{snap,xdg-desktop-portal}"),
+       peer=(name=:*),
 
-  dbus receive bus=session path=/{,org}
+  dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect
        peer=(name=:*, label=gnome-shell),

apparmor.d/groups/freedesktop/xdg-permission-store

@@ -29,9 +29,9 @@ profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
   dbus receive bus=session path=/org/freedesktop/impl/portal/PermissionStore
        interface=org.freedesktop.impl.portal.PermissionStore
        member=Lookup
-       peer=(name=:*, label="{gnome-shell,xdg-desktop-portal}"),
+       peer=(name=:*, label="{gnome-shell,xdg-desktop-portal,wireplumber}"),
 
-  dbus receive bus=session path=/{,org}
+  dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect
        peer=(name=:*, label=gnome-shell),