feat(profile): general update.

apparmor.d/profiles-a-f/agetty

@@ -34,6 +34,7 @@ profile agetty @{exec_path} {
   /etc/os-release r,
   /usr/etc/login.defs r,
 
+        @{run}/credentials/getty@tty@{int}.service/ r,
         @{run}/credentials/serial-getty@ttyS@{int}.service/ r,
   owner @{run}/agetty.reload rw,
 

apparmor.d/profiles-a-f/dino-im

@@ -11,10 +11,8 @@ include <tunables/global>
 profile dino-im @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
+  include <abstractions/desktop>
   include <abstractions/fontconfig-cache-read>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
   include <abstractions/nameservice-strict>
   include <abstractions/ssl_certs>
 
@@ -46,6 +44,7 @@ profile dino-im @{exec_path} {
     owner @{HOME}/.gnupg/ rw,
     owner @{HOME}/.gnupg/** rwkl -> @{HOME}/.gnupg/**,
 
+    include if exists <local/dino-im_gpg>
   }
 
   include if exists <local/dino-im>

apparmor.d/profiles-a-f/dkms

@@ -104,7 +104,7 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
 
     owner /boot/System.map-* r,
 
-    audit owner @{tmp}/tmp.* r,
+    owner @{tmp}/tmp.@{rand10} r,
 
     @{sys}/module/compression r,
 

apparmor.d/profiles-a-f/fractal

@@ -23,6 +23,8 @@ profile fractal @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  /usr/share/xml/iso-codes/{,**} r,
+
   owner @{tmp}/.@{rand6} rw, 
   owner @{tmp}/.goutputstream-@{rand6} rw,
   owner @{tmp}/@{rand6} rw,

apparmor.d/profiles-a-f/fwupd

@@ -142,7 +142,8 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
     owner /var/lib/fwupd/gnupg/ rw,
     owner /var/lib/fwupd/gnupg/** rwkl -> /var/lib/fwupd/gnupg/**,
 
-    owner @{PROC}/@{pids}/fd/ r,
+    owner @{PROC}/@{pid}/fd/ r,
+    owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
     include if exists <local/fwupd_gpg>
   }