Update profiles.

apparmor.d/groups/gnome/evolution-addressbook-factory

@@ -18,7 +18,7 @@ profile evolution-addressbook-factory @{exec_path} {
   network inet dgram,
   network inet6 dgram,
   network netlink raw,
-  
+
   @{exec_path} mr,
   @{exec_path}-subprocess rix,
   /usr/share/glib-2.0/schemas/gschemas.compiled r,

apparmor.d/groups/gnome/gnome-contacts

@@ -21,10 +21,12 @@ profile gnome-contacts @{exec_path} {
   @{exec_path} mr,
 
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
+  /usr/share/glvnd/egl_vendor.d/{,*.json} r,
   /usr/share/applications/{,*.desktop} r,
 
   owner @{user_cache_dirs}/evolution/addressbook/{,**} r,
   owner @{user_cache_dirs}/gstreamer*/{,**} r,
+  owner @{user_cache_dirs}/mesa_shader_cache/index rw,
   owner @{user_config_dirs}/gnome-contacts/{,**} rw,
   owner @{user_share_dirs}/folks/relationships.ini r,
 
@@ -32,5 +34,9 @@ profile gnome-contacts @{exec_path} {
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
 
+  @{PROC}/sys/dev/i915/perf_stream_paranoid r,
+
+  /dev/ r,
+
   include if exists <local/gnome-contacts>
 }

apparmor.d/groups/gnome/gsd-media-keys

@@ -30,6 +30,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
   /usr/share/X11/xkb/** r,
 
   owner @{user_share_dirs}/event-sound-cache.tdb.* rwk,
+  owner @{user_share_dirs}/recently-used.xbel{,.*} rw,
 
   /var/lib/gdm/.config/pulse/client.conf r,
 

apparmor.d/groups/gnome/tracker-extract

@@ -22,6 +22,7 @@ profile tracker-extract @{exec_path} {
   /usr/share/applications/*.desktop r,
   /usr/share/mime/mime.cache r,
 
+  owner /tmp/tracker-extract-3-files.*/{,*} rw,
   owner @{user_cache_dirs}/tracker3/files/{,**} rwk,
   owner @{user_share_dirs}/gvfs-metadata/** r,
 
@@ -36,8 +37,6 @@ profile tracker-extract @{exec_path} {
   owner @{run}/user/@{uid}/dconf/ rw,
   owner @{run}/user/@{uid}/dconf/user rw,
 
-  /tmp/tracker-extract-3-files.*/{,*} rw,
-
   @{run}/udev/data/c236:* r,
 
   include if exists <local/tracker-extract>

apparmor.d/groups/gnome/tracker-miner

@@ -32,9 +32,9 @@ profile tracker-miner @{exec_path} {
   owner @{user_config_dirs}/tracker3/{,**} rwk,
   owner @{user_cache_dirs}/tracker3/files/{,**} rwk,
 
-  @{PROC}/@{pid}/mountinfo r,
-  @{PROC}/@{pid}/mounts r,
-  @{PROC}/sys/fs/inotify/max_user_watches r,
+  owner @{PROC}/@{pid}/mountinfo r,
+  owner @{PROC}/@{pid}/mounts r,
+        @{PROC}/sys/fs/inotify/max_user_watches r,
 
   include <abstractions/dconf>
   owner @{run}/user/@{uid}/dconf/ rw,