feat(profile): general update.

apparmor.d/groups/freedesktop/dconf-editor

@@ -12,15 +12,10 @@ profile dconf-editor @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
   include <abstractions/fontconfig-cache-read>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
+  include <abstractions/gnome-strict>
 
   @{exec_path} mr,
 
-  /usr/share/glib-2.0/schemas/{,*} r,
-  /usr/share/X11/xkb/{,**} r,
-
   # When GSETTINGS_BACKEND=keyfile
   owner @{user_config_dirs}/glib-2.0/ rw,
   owner @{user_config_dirs}/glib-2.0/settings/ rw,

apparmor.d/groups/freedesktop/pipewire

@@ -35,7 +35,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
        member=Introspect
        peer=(name=:*, label=gnome-shell),
 
-  @{exec_path} mr,
+  @{exec_path} mrix,
 
   @{bin}/pactl                   rix,
   @{bin}/pipewire-media-session  rPx,

apparmor.d/groups/freedesktop/xorg

@@ -85,6 +85,7 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
   @{run}/lightdm/{,**} rw,
 
         /tmp/ r,
+        /tmp/server-[0-9].xkm rw,
   owner /tmp/.tX[0-9]-lock rwk,
   owner /tmp/.X[0-9]-lock rwkl -> /tmp/.tX[0-9]-lock,
   owner /tmp/server-* rwk,