Update profile from #25 (2).

apparmor.d/profiles-s-z/wireplumber

@@ -20,10 +20,14 @@ profile wireplumber @{exec_path} {
 
   @{exec_path} mr,
 
+  /etc/machine-id r,
+
   /usr/share/alsa-card-profile/{,**} r,
   /usr/share/spa-*/bluez[0-9]*/{,*} r,
   /usr/share/wireplumber/{,**} r,
 
+  /var/lib/gdm/.local/state/wireplumber/{,**} r,
+
   owner @{HOME}/.local/state/ w,
   owner @{HOME}/.local/state/wireplumber/{,**} rw,
 

apparmor.d/profiles-s-z/xdg-dbus-proxy

@@ -16,6 +16,7 @@ profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected, complain) {
 
   owner @{run}/firejail/dbus/[0-9]*/[0-9]*-user rw,
   owner @{run}/user/@{uid}/webkitgtk/dbus-proxy-[0-9A-Z]* rw,
+  owner @{run}/user/@{uid}/.dbus-proxy/{session,a11y}-bus-proxy-[0-9A-Z]* rw,
 
   @{sys}/devices/virtual/thermal/thermal_zone[0-9]/hwmon[0-9]/temp* r,
 

apparmor.d/profiles-s-z/xdg-desktop-portal

@@ -11,18 +11,27 @@ profile xdg-desktop-portal @{exec_path} {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
 
+  capability sys_ptrace,
+
   network netlink raw,
 
   ptrace (read),
 
   @{exec_path} mr,
 
+  /{usr/,}lib/x r,
+
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/mime/mime.cache r,
   /usr/share/pipewire/client.conf r,
   /usr/share/xdg-desktop-portal/portals/{,*.portal} r,
 
+  /etc/machine-id r,
+
+  /var/lib/flatpak/exports/share/mime/mime.cache r,
+
   owner @{user_config_dirs}/user-dirs.dirs r,
+  owner @{run}/user/@{uid}/.flatpak/*/* r,
 
   include <abstractions/dconf>
   owner @{run}/user/@{uid}/dconf/ rw,

apparmor.d/profiles-s-z/xdg-document-portal

@@ -14,6 +14,7 @@ profile xdg-document-portal @{exec_path} {
 
   /{usr/,}bin/fusermount rPx,
 
+  owner @{user_share_dirs}/flatpak/db/documents r,
   owner @{run}/user/@{uid}/doc/ rw,
 
   /dev/fuse rw,

apparmor.d/profiles-s-z/xdg-permission-store

@@ -16,6 +16,7 @@ profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mr,
 
   @{HOME}/@{XDG_DATA_HOME}/flatpak/db/gnome rw,
+  @{user_share_dirs}/flatpak/db/background r,
 
   /dev/tty[0-9]* rw,