feat(profiles): general update.

apparmor.d/groups/gnome/gnome-control-center

@@ -88,7 +88,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   owner @{user_cache_dirs}/gnome-control-center/{,**} rw,
   owner @{user_cache_dirs}/thumbnails/{,**} rw,
   owner @{user_config_dirs}/gnome-control-center/{,**} rw,
-  owner @{user_config_dirs}/ibus/bus/{,[0-9a-f]*-unix-wayland-[0-9]} r,
+  owner @{user_config_dirs}/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
   owner @{user_config_dirs}/mimeapps.list.* rw,
   owner @{user_share_dirs}/backgrounds/{,**} rw,
   owner @{user_share_dirs}/gvfs-metadata/{,*} r,

apparmor.d/groups/pacman/aurpublish

@@ -16,15 +16,36 @@ profile aurpublish @{exec_path} {
 
   /{usr/,}bin/{,ba,da}sh  rix,
   /{usr/,}bin/cat         rix,
+  /{usr/,}bin/chmod       rix,
+  /{usr/,}bin/date        rix,
+  /{usr/,}bin/gettext     rix,
   /{usr/,}bin/git         rPx,
-  /{usr/,}bin/makepkg     rUx,
+  /{usr/,}bin/gpg         rPUx,
+  /{usr/,}bin/grep        rix,
+  /{usr/,}bin/makepkg     rix,
+  /{usr/,}bin/mkdir       rix,
+  /{usr/,}bin/mktemp      rix,
+  /{usr/,}bin/nproc       rix,
   /{usr/,}bin/rm          rix,
+  /{usr/,}bin/sha512sum   rix,
   /{usr/,}bin/wc          rix,
 
+  /usr/share/makepkg/{,**} r,
+
+  /etc/makepkg.conf r,
+
+  owner @{user_build_dirs}/**/ w,
   owner @{user_projects_dirs}/**/.git/COMMIT_EDITMSG rw,
   owner @{user_projects_dirs}/**/.SRCINFO rw,
   owner @{user_projects_dirs}/**/PKGBUILD r,
 
+  owner @{user_cache_dirs}/makepkg/src/* r,
+  owner @{user_config_dirs}/pacman/makepkg.conf r,
+
+  owner /tmp/tmp.* rw,
+
+  owner @{PROC}/@{pid}/maps r,
+
   /dev/tty rw,
 
   include if exists <local/aurpublish>

apparmor.d/groups/pacman/pacdiff

@@ -24,8 +24,13 @@ profile pacdiff @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/find         rix,
   /{usr/,}bin/gawk         rix,
   /{usr/,}bin/locate       rix,
+  /{usr/,}bin/pacman       rix,
   /{usr/,}bin/pacman-conf  rPx,
+  /{usr/,}bin/pacsort      rix,
+  /{usr/,}bin/rm           rix,
+  /{usr/,}bin/sed          rix,
   /{usr/,}bin/tput         rix,
+  /{usr/,}bin/vim          rix,
 
   # packages files
   / r,

apparmor.d/groups/ubuntu/apport-gtk

@@ -19,7 +19,9 @@ profile apport-gtk @{exec_path} {
   include <abstractions/python>
   include <abstractions/ssl_certs>
 
+  capability fowner,
   capability sys_ptrace,
+  capability syslog,
 
   network inet stream,
   network inet6 stream,
@@ -28,26 +30,28 @@ profile apport-gtk @{exec_path} {
 
   @{exec_path} mr,
 
+  @{libexec}/colord-sane            rPx,
   /{usr/,}{s,}bin/killall5          rix,
   /{usr/,}bin/{,ba,da}sh            rix,
   /{usr/,}bin/{f,}grep              rix,
-  /{usr/,}bin/cut                   rix,
-  /{usr/,}bin/ischroot              rix,
-  /{usr/,}bin/ldd                   rix,
-  /{usr/,}bin/md5sum                rix,
-  /{usr/,}bin/which{,.debianutils}  rix,
-  /{usr/,}lib/@{multiarch}/ld*.so*  rix,
-  /{usr/,}bin/dpkg-query            rpx,
-  /{usr/,}bin/pkexec                rPx, # TODO: rCx or something
   /{usr/,}bin/apt-cache             rPx,
+  /{usr/,}bin/cut                   rix,
   /{usr/,}bin/dpkg                  rPx,
   /{usr/,}bin/dpkg-divert           rPx,
+  /{usr/,}bin/dpkg-query            rpx,
   /{usr/,}bin/gdb                   rCx -> gdb,
   /{usr/,}bin/gsettings             rPx,
+  /{usr/,}bin/ischroot              rix,
   /{usr/,}bin/journalctl            rPx,
   /{usr/,}bin/kmod                  rPx,
+  /{usr/,}bin/ldd                   rix,
   /{usr/,}bin/lsb_release           rPx -> lsb_release,
+  /{usr/,}bin/md5sum                rix,
+  /{usr/,}bin/pkexec                rPx, # TODO: rCx or something
   /{usr/,}bin/systemctl             rPx -> child-systemctl,
+  /{usr/,}bin/which{,.debianutils}  rix,
+  /{usr/,}lib/@{multiarch}/ld*.so*  rix,
+  /usr/share/apport/root_info_wrapper rix,
 
   /usr/share/alsa/{,**} r,
   /usr/share/apport/{,**} r,
@@ -68,11 +72,13 @@ profile apport-gtk @{exec_path} {
   /var/crash/{,*.@{uid}.crash} rw,
   /var/lib/dpkg/info/ r,
   /var/lib/dpkg/info/*.list r,
+  /var/lib/usbutils/*.ids r,
   /var/lib/dpkg/info/*.md5sums r,
   /var/log/installer/media-info r,
 
         @{run}/snapd.socket rw,
   owner @{run}/user/@{uid}/wayland-[0-9] rw,
+  owner @{run}/user/.mutter-Xwaylandauth.* rw,
 
   /tmp/[a-z0-9]* rw,
   /tmp/apport_core_* rw,
@@ -99,6 +105,8 @@ profile apport-gtk @{exec_path} {
     /{usr/,}bin/iconv rix,
     /{usr/,}{s,}bin/* r,
 
+    /usr/share/gcc/python/**/__pycache__/{,**} rw,
+
     /usr/share/gdb/{,**} r,
     /usr/share/themes/{,**} r,
     /usr/share/gnome-shell/{,**} r,

apparmor.d/groups/virt/libvirtd

@@ -130,6 +130,7 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
   /usr/share/mime/mime.cache r,
   /usr/share/qemu/{,**} r,
 
+  /etc/apparmor.d/libvirt/libvirt-@{uuid} r,
   /etc/libvirt/{,**} rw,
   /etc/mdevctl.d/{,**} r,
   /etc/xml/catalog r,