feat(profile): add some dbus rules.

apparmor.d/groups/gnome/gdm

@@ -31,6 +31,15 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
 
   # dbus: talk bus=system name=org.freedesktop.login1 label=systemd-logind
 
+  dbus send bus=system path=/org/freedesktop/Accounts
+       interface=org.freedesktop.Accounts
+       member=ListCachedUsers
+       peer=(name=:*, label=accounts-daemon),
+  dbus send bus=system path=/org/freedesktop/Accounts
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=:*, label=accounts-daemon),
+
   dbus send bus=system path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus
        member={GetConnectionUnixProcessID,GetConnectionUnixUser}

apparmor.d/groups/gnome/gnome-shell

@@ -126,6 +126,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
        interface=org.freedesktop.ColorManager
        member=DeleteDevice
        peer=(name=:*, label=colord),
+  dbus receive bus=system path=/org/freedesktop/ColorManager
+       interface=org.freedesktop.ColorManager
+       member=ProfileAdded
+       peer=(name=:*, label=colord),
 
   dbus receive bus=system path=/org/freedesktop/login1/seat/seat@{int}
        interface=org.freedesktop.DBus.Properties
@@ -183,6 +187,21 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
        member=JobRemoved
        peer=(name=:*, label="@{systemd}"),
 
+  dbus send bus=session path=/MenuBar
+       interface=com.canonical.dbusmenu
+       member={AboutToShow,GetLayout,GetGroupProperties}
+       peer=(name=:*),
+
+  dbus send bus=session path=/StatusNotifierItem
+       interface=org.freedesktop.DBus.Properties
+       member={Get,GetAll}
+       peer=(name=:*),
+
+  dbus send bus=session path=/org/mpris/MediaPlayer2
+       interface=org.freedesktop.DBus.Properties
+       member={Get,GetAll}
+       peer=(name=:*),
+
   dbus send bus=session
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect

apparmor.d/groups/gnome/tracker-extract

@@ -28,16 +28,9 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
 
   signal (receive) set=(term) peer=gdm,
 
-  dbus bind bus=session name=org.freedesktop.Tracker3.Miner.Extract,
+  # dbus: own bus=session name=org.freedesktop.Tracker3.Miner.Extract
 
-  # Talk to tracker-miner
-  dbus send bus=session path=/org/freedesktop/Tracker3/{Files,Endpoint,Miner/Extract}
-       interface={org.freedesktop.Tracker3.{Miner,Endpoint,Files},org.freedesktop.DBus.{Peer,Properties}}
-       peer=(name="{:*,org.freedesktop.Tracker3.Miner.Files,org.freedesktop.DBus}", label=tracker-miner),
-  dbus send bus=session path=/org/freedesktop/Tracker3/Endpoint
-       interface=org.freedesktop.DBus.Peer
-       member=Ping
-       peer=(name=org.freedesktop.Tracker3.Miner.Files),
+  # dbus: talk bus=session name=org.freedesktop.Tracker3 label=tracker-miner interface=org.freedesktop.DBus.{Properties,Peer}
 
   dbus send bus=session path=/org/gtk/vfs/metadata
        interface=org.gtk.vfs.Metadata

apparmor.d/groups/gnome/tracker-miner

@@ -28,15 +28,7 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
   signal (receive) set=(term, kill) peer=gdm,
   signal (receive) set=(hup)        peer=gdm-session-worker,
 
-  dbus bind bus=session name=org.freedesktop.Tracker3.Miner.Files{,.*},
-  dbus (send, receive) bus=session path=/org/freedesktop/Tracker3/Endpoint
-       interface={org.freedesktop.Tracker3.Endpoint,org.freedesktop.DBus.Peer}
-       peer=(name=:*),
-
-  # Talk from tracker-extract
-  dbus receive bus=session path=/org/freedesktop/Tracker3/{Files,Endpoint,Miner/Extract}
-       interface={org.freedesktop.Tracker3.{Miner,Endpoint,Files},org.freedesktop.DBus.{Peer,Properties}}
-       peer=(name="{:*,org.freedesktop.DBus}", label=tracker-extract),
+  # dbus: own bus=session name=org.freedesktop.Tracker3 interface=org.freedesktop.DBus.{Properties,Peer}
 
   @{exec_path} mr,