feat(profile): general update.

apparmor.d/profiles-s-z/YACReaderLibrary

@@ -14,11 +14,16 @@ profile YACReaderLibrary @{exec_path} flags=(attach_disconnected,mediate_deleted
   include <abstractions/desktop>
   include <abstractions/graphics>
   include <abstractions/nameservice-strict>
+  include <abstractions/qt5-settings-write>
   include <abstractions/qt5-shader-cache>
+  include <abstractions/ssl_certs>
 
+  network inet dgram,
   network inet stream,
+  network inet6 dgram,
   network inet6 stream,
   network netlink dgram,
+  network netlink raw,
 
   @{exec_path} mr,
 
@@ -31,6 +36,7 @@ profile YACReaderLibrary @{exec_path} flags=(attach_disconnected,mediate_deleted
 
   owner @{user_books_dirs}/{,**} r,
   owner @{user_books_dirs}/**/.yacreaderlibrary/{,**} rwk,
+  owner @{user_books_dirs}/**/None rw,
 
   owner @{user_cache_dirs}/YACReader/ rw,
   owner @{user_cache_dirs}/YACReader/YACReaderLibrary/ rw,
@@ -43,7 +49,10 @@ profile YACReaderLibrary @{exec_path} flags=(attach_disconnected,mediate_deleted
 
   owner @{tmp}/@{uuid} w,
 
+  @{run}/mount/utab r,
+
   owner @{PROC}/@{pid}/cmdline r,
+  owner @{PROC}/@{pid}/mountinfo r,
 
   include if exists <local/YACReaderLibrary>
 }

apparmor.d/profiles-s-z/sanoid

@@ -27,8 +27,6 @@ profile sanoid @{exec_path} flags=(complain) {
   @{run}/sanoid/sanoid_cacheupdate.lock rwk,
   @{run}/sanoid/sanoid_pruning.lock rwk,
 
-  owner @{tmp}/** rw,
-
   include if exists <local/sanoid>
 }
 

apparmor.d/profiles-s-z/sensors-detect

@@ -27,7 +27,7 @@ profile sensors-detect @{exec_path} {
   @{sys}/bus/pci/devices/ r,
   @{sys}/class/i2c-adapter/ r,
   @{sys}/devices/@{pci}/{class,vendor,device} r,
-  @{sys}/devices/@{pci}/i2c-@{int}/name r,
+  @{sys}/devices/@{pci}/i2c-@{int}/{,**/}name r,
   @{sys}/devices/@{pci}/modalias r,
   @{sys}/devices/virtual/dmi/id/board_{version,vendor,name} r,
   @{sys}/devices/virtual/dmi/id/chassis_type r,

apparmor.d/profiles-s-z/steam-game-proton

@@ -29,6 +29,7 @@ profile steam-game-proton @{exec_path} flags=(attach_disconnected) {
   network unix stream,
 
   signal receive peer=steam,
+  unix,
 
   @{exec_path} mr,
   @{bin}/bwrap mrix,

apparmor.d/profiles-s-z/steam-gameoverlayui

@@ -23,7 +23,8 @@ profile steam-gameoverlayui @{exec_path} flags=(attach_disconnected) {
 
   network inet stream,
   network inet6 stream,
-  network unix stream,
+
+  unix,
 
   @{exec_path} mr,
 

apparmor.d/profiles-s-z/syncoid

@@ -25,8 +25,6 @@ profile syncoid @{exec_path} flags=(complain) {
 
   /etc/mbuffer.rc r,
 
-  owner @{tmp}/** rw,
-
   @{PROC}/@{pids}/maps r,
 
   include if exists <local/syncoid>

apparmor.d/profiles-s-z/system-config-printer

@@ -46,8 +46,6 @@ profile system-config-printer @{exec_path} flags=(complain) {
         @{run}/cups/cups.sock rw,
   owner @{run}/user/@{uid}/gvfsd/socket-@{rand8} rw,
 
-  owner @{tmp}/* rw,
-
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/fdinfo/@{int} r,
   owner @{PROC}/@{pid}/mountinfo r,

apparmor.d/profiles-s-z/waybar

@@ -9,7 +9,8 @@ include <tunables/global>
 @{exec_path} = @{bin}/waybar
 profile waybar @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
-  include <abstractions/audio>
+  include <abstractions/audio-client>
+  include <abstractions/app-launcher-user>
   include <abstractions/dconf-write>
   include <abstractions/desktop>
   include <abstractions/nameservice-strict>