feat: update profiles.

apparmor.d/groups/desktop/at-spi-bus-launcher

@@ -33,7 +33,7 @@ profile at-spi-bus-launcher @{exec_path} flags=(attach_disconnected) {
   owner @{HOME}/.Xauthority r,
   owner @{HOME}/.xsession-errors w,
 
-  owner @{run}/user/@{uid}/at-spi/ w,
+  owner @{run}/user/@{uid}/at-spi/{,bus} rw,
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
   owner @{run}/user/@{uid}/gdm/Xauthority r,

apparmor.d/groups/desktop/xwayland

@@ -31,6 +31,7 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[a-zA-z0-9]* rw,
 
   @{sys}/bus/pci/devices/ r,
+  @{sys}/devices/pci[0-9]*/**/revision r,
 
         @{PROC}/@{pids}/cmdline r,
   owner @{PROC}/@{pids}/comm r,

apparmor.d/groups/gnome/gnome-shell

@@ -156,6 +156,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   @{sys}/devices/pci[0-9]*/**/drm/ r,
   @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/gt_*_mhz r,
   @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/id r,
+  @{sys}/devices/pci[0-9]*/**/revision r,
 
   owner @{PROC}/@{pid}/comm r,
   owner @{PROC}/@{pid}/fd/ r,

apparmor.d/groups/gnome/tracker-extract

@@ -44,6 +44,7 @@ profile tracker-extract @{exec_path} {
   
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
+        @{run}/blkid/blkid.tab r,
 
   @{run}/udev/data/c235:* r,
   @{run}/udev/data/c236:* r,

apparmor.d/groups/gnome/tracker-miner

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/tracker-miner-fs-{,control-}3
 profile tracker-miner @{exec_path} {
   include <abstractions/base>
+  include <abstractions/dconf>
   include <abstractions/disks-read>
   include <abstractions/private-files-strict>
   include <abstractions/private-files>
@@ -38,9 +39,9 @@ profile tracker-miner @{exec_path} {
   owner @{PROC}/@{pid}/mounts r,
         @{PROC}/sys/fs/inotify/max_user_watches r,
 
-  include <abstractions/dconf>
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
+        @{run}/blkid/blkid.tab r,
 
   @{run}/mount/utab r,
 

apparmor.d/groups/systemd/systemd-logind

@@ -46,12 +46,14 @@ profile systemd-logind @{exec_path} flags=(complain) {
   @{run}/udev/data/c116:[0-9]* r, # for ALSA
   @{run}/udev/data/c226:[0-9]* r, # for /dev/dri/card*
   @{run}/udev/data/c23[0-9]:[0-9]* r,
+  @{run}/udev/data/c29:[0-9]* r,
   @{run}/udev/data/c50[0-9]:[0-9]* r,
   @{run}/udev/data/c51[0-9]:[0-9]* r,
 
   @{run}/udev/data/+input* r,          # for mouse, keyboard, touchpad
   @{run}/udev/data/+drm:card[0-9]-* r, # for screen outputs
   @{run}/udev/data/+backlight:intel_backlight r,
+  @{run}/udev/data/+pci* r,
 
   @{run}/systemd/seats/ rw,
   @{run}/systemd/seats/.#seat* rw,

apparmor.d/groups/systemd/systemd-tty-ask-password-agent

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}bin/systemd-tty-ask-password-agent
 profile systemd-tty-ask-password-agent @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   @{exec_path} mr,
 

apparmor.d/groups/systemd/zram-generator

@@ -13,8 +13,9 @@ profile zram-generator @{exec_path} {
 
   @{exec_path} mr,
 
-  /{usr/,}lib/systemd/systemd-makefs rPx,
-  /{usr/,}bin/systemd-detect-virt rPx,
+  /{usr/,}bin/kmod                    rix,
+  /{usr/,}bin/systemd-detect-virt     rPx,
+  /{usr/,}lib/systemd/systemd-makefs  rPx,
 
   /etc/systemd/zram-generator.conf r,