feat(profile): general update.

apparmor.d/groups/gnome/epiphany-search-provider

@@ -36,6 +36,9 @@ profile epiphany-search-provider @{exec_path} {
   owner @{user_cache_dirs}/epiphany/{,**} rwk,
   owner @{user_share_dirs}/epiphany/{,**} rwk,
 
+  owner /tmp/ContentRuleList@{rand6} rw,
+  owner /tmp/Serialized* rw, 
+
   @{sys}/devices/virtual/dmi/id/chassis_type r,
   @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/session.slice/dbus.service/memory.* r,
 

apparmor.d/groups/gnome/gdm

@@ -65,8 +65,7 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
   @{run}/gdm{3,}/gdm.pid rw,
   @{run}/gdm{3,}/greeter/ rw,
   @{run}/systemd/seats/seat@{int} r,
-  @{run}/systemd/sessions/*     r,
-  @{run}/systemd/sessions/*.ref r,
+  @{run}/systemd/sessions/* r,
   @{run}/systemd/users/@{uid} r,
 
   @{run}/udev/data/+drm:card[0-9]-* r,    # for screen outputs

apparmor.d/groups/gnome/gdm-generate-config

@@ -31,6 +31,9 @@ profile gdm-generate-config @{exec_path} {
   /var/lib/ r,
   /var/lib/gdm{3,}/{,**} r,
 
+  /var/lib/gdm{3,}/greeter-dconf-defaults rw,
+  /var/lib/gdm{3,}/greeter-dconf-defaults.@{rand6} w,
+
   @{PROC}/ r,
   @{PROC}/@{pid}/cgroup  r,
   @{PROC}/@{pid}/cmdline r,

apparmor.d/groups/gnome/gnome-contacts

@@ -9,6 +9,10 @@ include <tunables/global>
 @{exec_path} = @{bin}/gnome-contacts
 profile gnome-contacts @{exec_path} {
   include <abstractions/base>
+  include <abstractions/bus-accessibility>
+  include <abstractions/bus-session>
+  include <abstractions/bus/org.a11y>
+  include <abstractions/bus/org.freedesktop.portal.Desktop>
   include <abstractions/dconf-write>
   include <abstractions/dri-common>
   include <abstractions/dri-enumerate>
@@ -23,9 +27,12 @@ profile gnome-contacts @{exec_path} {
 
   network netlink raw,
 
-  @{exec_path} mr,
+  # dbus: own bus=session name=org.gnome.Contacts
 
-  /usr/share/applications/{,*.desktop} r,
+  # dbus: talk bus=session name=org.gnome.evolution.dataserver.AddressBookFactory label=evolution-addressbook-factory
+  # dbus: talk bus=session name=org.gnome.evolution.dataserver.Source label=evolution-source-registry
+
+  @{exec_path} mr,
 
   owner @{user_cache_dirs}/evolution/addressbook/{,**} r,
   owner @{user_config_dirs}/gnome-contacts/{,**} rw,