feat(profile): cleanup flatpak share access.

apparmor.d/groups/gnome/gnome-control-center-goa-helper

@@ -46,8 +46,6 @@ profile gnome-control-center-goa-helper @{exec_path} {
   /usr/share/cracklib/* r,
   /usr/share/publicsuffix/public_suffix_list.dafsa r,
 
-  /var/lib/flatpak/exports/share/icons/{,**} r,
-
   owner @{user_config_dirs}/goa-1.0/accounts.conf r,
 
   owner @{user_cache_dirs}/gnome-control-center-goa-helper/{,**} rwl,

apparmor.d/groups/gnome/gnome-shell

@@ -196,7 +196,6 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   /usr/share/gdm/BuiltInSessions/{,*.desktop} r,
   /usr/share/gdm/greeter-dconf-defaults r,
   /usr/share/gdm/greeter/applications/{,**} r,
-  /usr/share/gnome-shell/{,**} r,
   /usr/share/libgweather/Locations.xml r,
   /usr/share/libinput*/ r,
   /usr/share/libinput*/{,**/}[0-9][0-9]-*.quirks r,
@@ -205,6 +204,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   /usr/share/wallpapers/** r,
   /usr/share/wayland-sessions/{,*.desktop} r,
   /usr/share/xml/iso-codes/{,**} r,
+  @{system_share_dirs}/gnome-shell/{,**} r,
 
   / r,
   /.flatpak-info r,
@@ -217,7 +217,6 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
 
   /var/lib/flatpak/app/**/gnome-shell/{,**} r,
   /var/lib/flatpak/appstream/**/icons/** r,
-  /var/lib/flatpak/exports/share/gnome-shell/{,**} r,
 
   owner @{GDM_HOME}/greeter-dconf-defaults r,
   owner @{gdm_cache_dirs}/ w,

apparmor.d/groups/gnome/tracker-extract

@@ -49,9 +49,6 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
   /etc/blkid.conf r,
   /etc/fstab r,
 
-  /var/lib/flatpak/exports/share/applications/mimeinfo.cache r,
-  /var/lib/flatpak/exports/share/mime/mime.cache r,
-
   owner @{GDM_HOME}/greeter-dconf-defaults r,
   owner @{gdm_cache_dirs}/ rw,
   owner @{gdm_cache_dirs}/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rw,