feat(profile): general update.

apparmor.d/groups/xfce/mousepad

@@ -16,6 +16,8 @@ profile mousepad @{exec_path} {
 
   @{exec_path} mr,
 
+  @{open_path}  rPx -> child-open-help,
+
   owner @{user_config_dirs}/Mousepad/ rw,
   owner @{user_config_dirs}/Mousepad/{,**} rw,
 

apparmor.d/groups/xfce/thunar

@@ -22,6 +22,9 @@ profile thunar @{exec_path} {
   @{bin}/thunar-volman rPx,
   @{open_path} rPx -> child-open,
 
+  /usr/share/ r,
+  /usr/share/Thunar/{,**} r,
+
   /etc/fstab r,
   /etc/timezone r,
 

apparmor.d/groups/xfce/xfce-about

@@ -10,11 +10,12 @@ include <tunables/global>
 profile xfce-about @{exec_path} {
   include <abstractions/base>
   include <abstractions/graphics>
+  include <abstractions/nameservice-strict>
   include <abstractions/xfce>
 
   @{exec_path} mr,
 
-  @{open_path} rPx -> child-open-browsers,
+  @{open_path} rPx -> child-open-help,
 
   include if exists <local/xfce-about>
 }

apparmor.d/groups/xfce/xfce-clipman-settings

@@ -13,6 +13,8 @@ profile xfce-clipman-settings @{exec_path} {
 
   @{exec_path} mr,
 
+  @{open_path} rPx -> child-open-help,
+
   /etc/xdg/xfce4/panel/xfce4-clipman-actions.xml r,
 
   owner @{user_config_dirs}/xfce4/panel/xfce4-clipman-actions.xml rw,

apparmor.d/groups/xfce/xfce-terminal

@@ -16,6 +16,8 @@ profile xfce-terminal @{exec_path} {
 
   @{exec_path} mr,
 
+  @{open_path} rPx -> child-open-help,
+
   # The shell is not confined on purpose.
   @{bin}/@{shells}            rUx,
 

apparmor.d/groups/xfce/xfdesktop

@@ -11,6 +11,7 @@ profile xfdesktop @{exec_path} {
   include <abstractions/base>
   include <abstractions/app-launcher-user>
   include <abstractions/nameservice-strict>
+  include <abstractions/thumbnails-cache-read>
   include <abstractions/xfce>
 
   @{exec_path} mr,