feat(profile): general update.

apparmor.d/groups/gnome/gnome-clocks

@@ -14,8 +14,11 @@ profile gnome-clocks @{exec_path} {
   include <abstractions/bus-session>
   include <abstractions/bus/org.a11y>
   include <abstractions/common/gnome>
+  include <abstractions/gstreamer>
   include <abstractions/nameservice-strict>
 
+  network netlink raw,
+
   #aa:dbus own bus=session name=org.gnome.clocks
 
   @{exec_path} mr,

apparmor.d/groups/gnome/gnome-software

@@ -83,6 +83,11 @@ profile gnome-software @{exec_path} {
 
   owner @{user_share_dirs}/ r,
   owner @{user_share_dirs}/flatpak/.changed w,
+  owner @{user_share_dirs}/flatpak/{app,runtime}/ r,
+  owner @{user_share_dirs}/flatpak/{app,runtime}/*/ r,
+  owner @{user_share_dirs}/flatpak/{app,runtime}/*/**/@{hex64}/deploy r,
+  owner @{user_share_dirs}/flatpak/{app,runtime}/*/**/@{hex64}/metadata r,
+  owner @{user_share_dirs}/flatpak/{app,runtime}/*/*/ r,
   owner @{user_share_dirs}/flatpak/repo/ rw,
   owner @{user_share_dirs}/flatpak/repo/** rwl -> @{user_share_dirs}/flatpak/repo/**,
   owner @{user_share_dirs}/gnome-software/{,**} rw,

apparmor.d/groups/gnome/gnome-system-monitor

@@ -38,6 +38,8 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
   /usr/share/gnome-system-monitor/{,**} r,
   /usr/share/firefox-esr/browser/chrome/icons/default/*.png r,
 
+  owner @{tmp}/gdkpixbuf-xpm-tmp.@{rand6} rw,
+
   owner @{run}/user/@{uid}/doc/ rw,
   owner @{run}/user/@{uid}/gnome-shell-disable-extensions w,
 

apparmor.d/groups/gnome/gnome-tweaks

@@ -16,6 +16,8 @@ profile gnome-tweaks @{exec_path} {
   include <abstractions/python>
   include <abstractions/thumbnails-cache-read>
 
+  network netlink raw,
+
   @{exec_path} mr,
 
   @{bin}/ r,

apparmor.d/groups/gnome/gsd-datetime

@@ -34,6 +34,7 @@ profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
 
   owner @{user_cache_dirs}/geocode-glib/* r,
 
+  owner @{PROC}/@{pid}/fdinfo/@{int} r,
   owner @{PROC}/@{pid}/stat r,
 
   owner /dev/tty@{int} rw,

apparmor.d/groups/gnome/org.gnome.NautilusPreviewer

@@ -47,6 +47,7 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/mounts r,
   owner @{PROC}/@{pid}/stat r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm w,
   owner @{PROC}/@{pid}/task/@{tid}/stat r,
 
   /dev/media@{int} r,

apparmor.d/groups/gnome/tracker-miner

@@ -65,7 +65,9 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
   owner @{gdm_config_dirs}/dconf/user r,
   owner @{gdm_share_dirs}/applications/ r,
 
+  owner /var/tmp/etilqs_@{hex15} rw,
   owner /var/tmp/etilqs_@{hex16} rw,
+  owner @{tmp}/etilqs_@{hex15} rw,
   owner @{tmp}/etilqs_@{hex16} rw,
 
   # Allow to search user files