Update profiles.

apparmor.d/groups/gnome/gio-launch-desktop

@@ -15,6 +15,7 @@ profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
   include <abstractions/app-launcher-user>
   include <abstractions/consoles>
   include <abstractions/freedesktop.org>
+  include <abstractions/nameservice-strict>
   include <abstractions/trash>
 
   @{exec_path} mr,
@@ -33,6 +34,7 @@ profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
 
   # Required by many gio command
   owner @{HOME}/{,**} rw,
+  owner /tmp/wl-copy-buffer-*/{,**} rw,
 
   /dev/dri/card[0-9]* rw,
 

apparmor.d/groups/gnome/gnome-session-binary

@@ -35,8 +35,8 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
   /{usr/,}lib/evolution-data-server/evolution-alarm-notify rPx,
   /{usr/,}lib/gsd-*                                        rPx,
 
-  /{usr/,}bin/pkcs11-register                              rUx,
-  /{usr/,}bin/start-pulseaudio-x11                         rUx,
+  /{usr/,}bin/pkcs11-register                              rPx,
+  /{usr/,}bin/start-pulseaudio-x11                         rPx,
 
   /usr/share/applications/org.gnome.Shell.desktop r,
   /usr/share/gdm/greeter-dconf-defaults r,

apparmor.d/groups/gnome/gnome-shell

@@ -92,6 +92,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
 
   @{run}/systemd/users/@{uid} r,
+  @{run}/systemd/seats/seat[0-9]* r,
   @{run}/systemd/sessions/ r,
   @{run}/systemd/sessions/[0-9]* r,
   @{run}/systemd/inhibit/[0-9]*.ref rw,

apparmor.d/groups/gnome/tracker-miner

@@ -32,6 +32,8 @@ profile tracker-miner @{exec_path} {
   owner @{user_config_dirs}/tracker3/{,**} rwk,
   owner @{user_cache_dirs}/tracker3/files/{,**} rwk,
 
+  @{PROC}/@{pid}/mountinfo r,
+  @{PROC}/@{pid}/mounts r,
   @{PROC}/sys/fs/inotify/max_user_watches r,
 
   include <abstractions/dconf>