feat(profile): general update.

apparmor.d/profiles-a-f/evince-thumbnailer

@@ -7,10 +7,16 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/evince-thumbnailer
-profile evince-thumbnailer @{exec_path} {
+profile evince-thumbnailer @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
 
   @{exec_path} mr,
 
+  /usr/share/mime/mime.cache r,
+  /usr/share/poppler/{,**} r,
+
+  owner /tmp/gnome-desktop-file-to-thumbnail.pdf r,
+  owner /tmp/gnome-desktop-thumbnailer.png w,
+
   include if exists <local/evince-thumbnailer>
 }

apparmor.d/profiles-a-f/exim4

@@ -30,6 +30,8 @@ profile exim4 @{exec_path} {
   network inet6 stream,
   network netlink raw,
 
+  signal (receive) peer=init-exim4,
+
   @{exec_path} mrix,
 
   /etc/email-addresses r,