feat(profile): general update.

apparmor.d/profiles-a-f/abook

@@ -16,7 +16,7 @@ profile abook @{exec_path} {
   @{exec_path} mr,
 
   # Used for printing
-  @{bin}/{,ba,da}sh rix,
+  @{sh_path}         rix,
   @{bin}/lp{,r}     rPUx,
   # Abook has built in support to launch mutt
   @{bin}/mutt       rPUx,

apparmor.d/profiles-a-f/acpi-powerbtn

@@ -24,7 +24,7 @@ profile acpi-powerbtn flags=(attach_disconnected) {
   @{bin}/systemctl    rCx -> systemctl,
   @{bin}/ps           rPx,
 
-  @{bin}/fgconsole    rCx,
+  @{bin}/fgconsole    rCx -> fgconsole,
 
   /usr/share/acpi-support/** r,
 

apparmor.d/profiles-a-f/atril

@@ -40,8 +40,8 @@ profile atril @{exec_path} {
 
   @{bin}/atril-previewer rPx,
 
-  @{lib}/{,@{multiarch}/}webkit2gtk-*/WebKitNetworkProcess rix,
-  @{lib}/{,@{multiarch}/}webkit2gtk-*/WebKitWebProcess rix,
+  @{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitNetworkProcess rix,
+  @{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitWebProcess rix,
 
   /usr/share/atril/{,**} r,
   /usr/share/poppler/{,**} r,

apparmor.d/profiles-a-f/evince

@@ -36,7 +36,6 @@ profile evince @{exec_path} {
   @{exec_path} rix,
 
   @{sh_path}                 rix,
-  @{bin}/gio-launch-desktop  rPx,
   @{open_path}               rPx -> child-open,
 
   /usr/share/djvu/{,**} r,

apparmor.d/profiles-a-f/flatpak-system-helper

@@ -35,6 +35,7 @@ profile flatpak-system-helper @{exec_path} {
   @{lib}/revokefs-fuse  rix,
 
   /etc/flatpak/{,**} r,
+  /etc/machine-id r,
 
   /usr/share/mime/mime.cache r,
   /usr/share/flatpak/triggers/ r,

apparmor.d/profiles-a-f/font-manager

@@ -27,8 +27,8 @@ profile font-manager @{exec_path} {
 
   @{exec_path} r,
 
-  @{lib}/@{multiarch}/webkit*gtk-*/WebKitWebProcess     rix,
-  @{lib}/@{multiarch}/webkit*gtk-*/WebKitNetworkProcess rix,
+  @{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitNetworkProcess rix,
+  @{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitWebProcess rix,
 
   owner @{user_cache_dirs}/ rw,
   owner @{user_cache_dirs}/font-manager/ rw,