Profiles update.

apparmor.d/groups/gnome/gnome-music

@@ -13,8 +13,10 @@ profile gnome-music @{exec_path} {
   include <abstractions/gnome>
   include <abstractions/gstreamer>
   include <abstractions/nameservice-strict>
-  include <abstractions/python>
   include <abstractions/openssl>
+  include <abstractions/p11-kit>
+  include <abstractions/python>
+  include <abstractions/ssl_certs>
 
   network inet stream,
   network inet6 stream,

apparmor.d/groups/gnome/gnome-session-binary

@@ -44,6 +44,9 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
   /usr/share/gnome-session/hardware-compatibility r,
   /usr/share/gnome-session/sessions/*.session r,
 
+  /var/lib/gdm/.config/gnome-session/ rw,
+  /var/lib/gdm/.config/gnome-session/saved-session/ rw,
+
   owner @{user_config_dirs}/gnome-session/saved-session/ r,
   owner @{user_config_dirs}/gtk-3.0/bookmarks rw,
   owner @{user_config_dirs}/gtk-3.0/bookmarks.[0-9A-Z]* rw,

apparmor.d/groups/gnome/gnome-shell

@@ -61,7 +61,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   /etc/machine-id r,
   /var/lib/dbus/machine-id r,
 
+  /var/lib/gdm/.config/pulse/ r,
   /var/lib/gdm/.config/pulse/client.conf r,
+  /var/lib/gdm/.config/pulse/cookie rw,
+  /var/lib/gdm/.local/share/gnome-shell/ rw,
   /var/lib/gdm/.local/share/applications/{,**} r,
 
   owner @{HOME}/@{XDG_WALLPAPERS_DIR}/{,**} r,

apparmor.d/groups/gnome/gsd-color

@@ -22,7 +22,7 @@ profile gsd-color @{exec_path} flags=(attach_disconnected) {
   /usr/share/mime/mime.cache r,
   /usr/share/X11/xkb/** r,
 
-  /var/lib/gdm/.local/share/icc/ r,
+  /var/lib/gdm/.local/share/icc/ rw,
   /var/lib/gdm/.local/share/icc/edid-*.icc rw,
 
   owner @{run}/user/@{uid}/gdm/Xauthority r,

apparmor.d/groups/gnome/gsd-media-keys

@@ -35,6 +35,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
   owner @{user_share_dirs}/recently-used.xbel{,.*} rw,
 
   /var/lib/gdm/.config/pulse/client.conf r,
+  /var/lib/gdm/.config/pulse/cookie rk,
 
   owner @{run}/user/@{uid}/gdm/Xauthority r,
         @{run}/systemd/inhibit/[0-9]*.ref rw,

apparmor.d/groups/gnome/gsd-sound

@@ -17,6 +17,8 @@ profile gsd-sound @{exec_path} flags=(attach_disconnected) {
   /usr/share/gdm/greeter-dconf-defaults r,
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
 
+  /var/lib/gdm/.local/share/sounds/ rw,
+
   include <abstractions/dconf>
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,

apparmor.d/groups/gnome/nautilus

@@ -19,6 +19,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
 
   /usr/share/nautilus/{,**} r,
   /usr/share/tracker3/{,**} r,
+  /usr/share/sounds/freedesktop/stereo/*.oga r,
 
   owner @{user_share_dirs}/nautilus/{,**} rwk,
 

apparmor.d/groups/gnome/tracker-extract

@@ -20,6 +20,7 @@ profile tracker-extract @{exec_path} {
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/mime/mime.cache r,
   /usr/share/osinfo/{,**} r,
+  /usr/share/poppler/{,**} r,
   /usr/share/tracker3-miners/{,**} r,
   /usr/share/tracker3/{,**} r,
 
@@ -40,7 +41,7 @@ profile tracker-extract @{exec_path} {
 
   @{run}/udev/data/c235:* r,
   @{run}/udev/data/c236:* r,
-  @{run}/udev/data/c510:* r,
+  @{run}/udev/data/c51[0-9]:* r,
 
   /dev/video[0-9]* rw,