feat(profile): general update.

apparmor.d/abstractions/app/firefox

@@ -69,11 +69,12 @@
   /usr/share/webext/{,**} r,
   /usr/share/xul-ext/kwallet5/* r,
 
+  /etc/{,opensc/}opensc.conf r,
   /etc/@{name}/{,**} r,
   /etc/fstab r,
+  /etc/lsb-release r,
   /etc/mailcap r,
   /etc/mime.types r,
-  /etc/{,opensc/}opensc.conf r,
   /etc/sysconfig/proxy r,
   /etc/xdg/* r,
   /etc/xul-ext/kwallet5.js r,
@@ -96,7 +97,7 @@
   owner @{tmp}/firefox/* rwk,
   owner @{tmp}/Temp-@{uuid}/ rw,
   owner @{tmp}/Temp-@{uuid}/* rwk,
-  owner @{tmp}/tmp-???.xpi rw,
+  owner @{tmp}/tmp-*.xpi rw,
   owner @{tmp}/tmpaddon r,
   owner @{tmp}/tmpaddon-@{int} r,
 

apparmor.d/abstractions/audio-client

@@ -5,7 +5,7 @@
 # Most programs do not need access to audio devices, audio-client only includes
 # configuration files to be used by client applications.
 
-  /usr/share/alsa/** r,
+  /usr/share/alsa/{,**} r,
   /usr/share/openal/hrtf/{,**} r,
   /usr/share/pipewire/client-rt.conf r,
   /usr/share/pipewire/client.conf r,

apparmor.d/abstractions/audio-server

@@ -7,10 +7,6 @@
 
   include <abstractions/audio-client>
 
-  /usr/share/alsa/{,**} r,
-
-  /etc/alsa/conf.d/{,**} r,
-
   @{run}/udev/data/+sound:card@{int} r,   # for sound card
 
   @{sys}/class/ r,