update profiles for apparmor3

apparmor.d/spacefm

@@ -9,26 +9,26 @@
 #
 # ------------------------------------------------------------------
 
-#abi <abi/3.0>,
+abi <abi/3.0>,
 
-#include <tunables/global>
+include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/spacefm
 profile spacefm @{exec_path} {
-  #include <abstractions/base>
-  #include <abstractions/gtk>
-  #include <abstractions/fonts>
-  #include <abstractions/fontconfig-cache-read>
-  #include <abstractions/freedesktop.org>
-  #include <abstractions/nameservice-strict>
-  #include <abstractions/thumbnails-cache-read>
-  #include <abstractions/disks-read>
-  #include <abstractions/consoles>
+  include <abstractions/base>
+  include <abstractions/gtk>
+  include <abstractions/fonts>
+  include <abstractions/fontconfig-cache-read>
+  include <abstractions/freedesktop.org>
+  include <abstractions/nameservice-strict>
+  include <abstractions/thumbnails-cache-read>
+  include <abstractions/disks-read>
+  include <abstractions/consoles>
 
   # This should be tightened when the "profile has merged rule with conflicting x modifiers" error
   # will be fixed. (#FIXME#)
-  #include <abstractions/app-launcher-user>
-  #include <abstractions/app-launcher-root>
+  include <abstractions/app-launcher-user>
+  include <abstractions/app-launcher-root>
 
   # For root window
   deny capability dac_read_search,
@@ -40,6 +40,10 @@ profile spacefm @{exec_path} {
   # SpaceFM needs this for killing/terminating processes it initiates.
   signal (send) set=(term, kill),
 
+  network inet stream,
+  network inet6 stream,
+  network netlink raw,
+
   @{exec_path} mr,
 
   owner @{PROC}/@{pid}/mountinfo r,
@@ -97,5 +101,5 @@ profile spacefm @{exec_path} {
         /var/**   r,
   owner /var/**   rw,
 
-  #include if exists <local/spacefm>
+  include if exists <local/spacefm>
 }