feat(profiles): general update.

apparmor.d/groups/ssh/ssh-agent

@@ -17,34 +17,26 @@ profile ssh-agent @{exec_path} {
 
   @{exec_path} mr,
 
-  owner /tmp/ssh-*/ rw,
-  owner /tmp/ssh-*/agent.* rw,
-
-  # When SSH agent is not used with GPG
+  /{usr/,}bin/enlightenment_start  rPUx,
+  /{usr/,}bin/gpg-agent             rPx,
+  /{usr/,}bin/kwalletaskpass       rPUx,
   /{usr/,}bin/openbox-session       rPx,
   /{usr/,}bin/startkde             rPUx,
   /{usr/,}bin/sway                 rPUx,
-  /{usr/,}bin/enlightenment_start  rPUx,
 
-  # SSH keys
   owner @{HOME}/@{XDG_SSH_DIR}/ rw,
   owner @{HOME}/@{XDG_SSH_DIR}/* r,
+  owner @{HOME}/.xsession-errors w,
   owner @{user_projects_dirs}/**/ssh/{,*} r,
 
-  # When started via systemd
+  owner /tmp/ssh-*/ rw,
+  owner /tmp/ssh-*/agent.* rw,
+
   @{run}/user/@{uid}/openssh_agent rw,
-
-  # askpass apps
-  #/{usr/,}lib/ssh/x11-ssh-askpass rPUx,
-  #/{usr/,}bin/ksshaskpass         rPUx,
-  /{usr/,}bin/kwalletaskpass       rPUx,
-
-  # file_inherit
-  owner /dev/tty[0-9]* rw,
-  owner @{HOME}/.xsession-errors w,
-
   @{run}/user/@{uid}/keyring/.ssh rw,
   @{run}/user/@{uid}/ssh-agent.[0-9A-Z]* w,
 
+  owner /dev/tty[0-9]* rw,
+
   include if exists <local/ssh-agent>
 }