feat(profile): use the new audio-client abs in profiles.

apparmor.d/profiles-m-r/qtox

@@ -10,18 +10,14 @@ include <tunables/global>
 @{exec_path} = @{bin}/qtox
 profile qtox @{exec_path} {
   include <abstractions/base>
-  include <abstractions/X>
-  include <abstractions/gtk>
-  include <abstractions/fonts>
-  include <abstractions/fontconfig-cache-read>
-  include <abstractions/freedesktop.org>
+  include <abstractions/audio-client>
+  include <abstractions/desktop>
   include <abstractions/enchant>
-  include <abstractions/user-download-strict>
-  include <abstractions/qt5-settings-write>
-  include <abstractions/mesa>
-  include <abstractions/dri-enumerate>
+  include <abstractions/fontconfig-cache-read>
+  include <abstractions/graphics>
   include <abstractions/nameservice-strict>
-  include <abstractions/audio>
+  include <abstractions/qt5-settings-write>
+  include <abstractions/user-download-strict>
 
   network inet dgram,
   network inet6 dgram,
@@ -31,7 +27,12 @@ profile qtox @{exec_path} {
 
   @{exec_path} mr,
 
-  @{bin}/xdg-open    rCx -> open,
+  @{open_path}  rPx -> child-open,
+
+  /usr/share/qt5ct/** r,
+
+  /var/lib/dbus/machine-id r,
+  /etc/machine-id r,
 
   # For importing old profile
   owner @{HOME}/**.tox r,
@@ -51,50 +52,14 @@ profile qtox @{exec_path} {
 
   # To configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration
   owner @{user_config_dirs}/qt5ct/{,**} r,
-  /usr/share/qt5ct/** r,
 
   owner @{PROC}/@{pid}/cmdline r,
         @{PROC}/sys/kernel/core_pattern r,  # for KCrash::initialize()
 
-  /usr/share/hwdata/pnp.ids r,
-
-  /var/lib/dbus/machine-id r,
-  /etc/machine-id r,
-
   owner /tmp/qipc_{systemsem,sharedmemory}_*@{hex} rw,
 
-  @{sys}/devices/system/node/ r,                   # for ld-linux-x86-64.so -> libnuma1.so
-  @{sys}/devices/system/node/node@{int}/meminfo r, # for ld-linux-x86-64.so -> libnuma1.so
-
   /dev/ r,
   /dev/video@{int} rw,
 
-
-  profile open {
-    include <abstractions/base>
-    include <abstractions/xdg-open>
-
-    @{bin}/xdg-open mr,
-
-    @{sh_path}             rix,
-    @{bin}/{m,g,}awk       rix,
-    @{bin}/readlink        rix,
-    @{bin}/basename        rix,
-
-    owner @{HOME}/ r,
-
-    owner @{run}/user/@{uid}/ r,
-
-    # Allowed apps to open
-    @{lib}/firefox/firefox rPUx,
-    @{bin}/viewnior        rPUx,
-
-    # file_inherit
-    owner @{HOME}/.xsession-errors w,
-    owner @{user_cache_dirs}/qTox/qtox.log w,
-    deny /dev/video@{int} rw,
-
-  }
-
   include if exists <local/qtox>
 }