feat(profile): rewrite profile for vscode (wip).

apparmor.d/profiles-g-l/git

@@ -7,6 +7,8 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
+@{code_config_dirs} = @{user_config_dirs}/Code* @{HOME}/.vscode{,-oss}
+
 @{exec_path}  = @{bin}/git
 @{exec_path} += @{bin}/git-*
 @{exec_path} += @{lib}/git-core/git
@@ -104,6 +106,8 @@ profile git @{exec_path} {
   owner /tmp/git-commit-msg-.txt rw,         # For android studio
 
   deny @{user_share_dirs}/gvfs-metadata/* r,
+  deny /dev/shm/.org.chromium.Chromium* rw,
+  deny owner @{code_config_dirs}/** rw,
 
   profile gpg {
     include <abstractions/base>