feat(profile): general update.

apparmor.d/groups/gnome/gnome-control-center

@@ -153,6 +153,9 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   @{sys}/devices/virtual/thermal/thermal_zone@{int}/hwmon@{int}/temp* r,
   @{sys}/firmware/acpi/pm_profile r,
 
+        @{sys}/fs/cgroup/user.slice/cpu.max r,
+        @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/cpu.max r,
+        @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/cpu.max r,
   owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/{,**} rw,
 
         @{PROC}/cmdline r,

apparmor.d/groups/gnome/gnome-shell

@@ -181,16 +181,14 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   @{bin}/glib-compile-schemas   rPx,
   @{bin}/ibus-daemon            rPx,
   @{bin}/Xwayland               rPx,
+  @{lib}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
   @{lib}/mutter-x11-frames      rPx,
   #aa:exec polkit-agent-helper
 
   @{sh_path}                                              rCx -> shell,
   @{lib}/gio-launch-desktop                               rCx -> open,
   @{lib}/@{multiarch}/glib-@{version}/gio-launch-desktop  rCx -> open,
-  
-  # nm-openvpn-auth-dialog
-  @{lib}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
-  
+
   @{user_share_dirs}/gnome-shell/extensions/*/**       rPUx,
   /usr/share/gnome-shell/extensions/*/**               rPUx,
 
@@ -294,11 +292,12 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   owner @{run}/user/@{uid}/snap.snap*/wayland-cursor-shared-* rw,
   owner @{run}/user/@{uid}/systemd/notify rw,
 
-  owner /dev/shm/.org.chromium.Chromium.@{rand6} rw,
+  owner /dev/shm/.org.chromium.Chromium.@{rand6} r,
   owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
 
         /tmp/.X@{int}-lock rw,
         /tmp/dbus-@{rand8} rw,
+  owner @{tmp}/.org.chromium.Chromium.@{rand6} r,
   owner @{tmp}/@{rand6}.shell-extension.zip rw,
   owner @{tmp}/gdkpixbuf-xpm-tmp.@{rand6} rw,
 

apparmor.d/groups/gnome/nautilus

@@ -33,17 +33,13 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
 
   #aa:dbus talk bus=session name=org.gtk.MountOperationHandler label=gnome-shell
   #aa:dbus talk bus=session name=org.gtk.vfs label="gvfsd{,-*}"
+  #aa:dbus talk bus=session name=org.gtk.Notifications label=gnome-shell
 
   dbus send bus=session path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus.Properties
        member={GetAll,ListActivatableNames}
        peer=(name=org.freedesktop.DBus, label=dbus-session),
 
-  dbus send bus=session path=/org/gtk/Notifications
-       interface=org.gtk.Notifications
-       member=AddNotification
-       peer=(name=org.gtk.Notifications, label=gnome-shell),
-
   dbus (send, receive) bus=session path=/org/gtk/Application/CommandLine
        interface=org.gtk.private.CommandLine
        member=Print