feat(profile): general update.

apparmor.d/profiles-g-l/git

@@ -66,9 +66,9 @@ profile git @{exec_path} flags=(attach_disconnected) {
 
   @{bin}/man         rPx,
   @{bin}/meld       rPUx,
-  @{lib}/code/extensions/git/dist/askpass.sh rPx,
-  @{lib}/code/extensions/git/dist/git-editor.sh rPx,
-  /usr/share/aurpublish/*.hook rPx,
+  @{lib}/code/extensions/git/dist/askpass.sh     rPx,
+  @{lib}/code/extensions/git/dist/git-editor.sh  rPx,
+  /usr/share/aurpublish/*.hook                   rPx,
 
   @{bin}/gpg{,2}         rCx -> gpg,
   @{bin}/ssh             rCx -> ssh,
@@ -98,6 +98,7 @@ profile git @{exec_path} flags=(attach_disconnected) {
 
   deny owner @{code_config_dirs}/** rw,
   deny owner @{user_share_dirs}/gvfs-metadata/* r,
+  deny owner @{user_share_dirs}/vulkan/** r,
   deny owner @{user_share_dirs}/zed/**/data.mdb rw,
   deny /usr/share/nvidia/nvidia-application-profiles-* r,
   deny /dev/shm/.org.chromium.Chromium.@{rand6} rw,

apparmor.d/profiles-g-l/hypnotix

@@ -37,8 +37,7 @@ profile hypnotix @{exec_path} {
   @{bin}/ldconfig        rix,
   @{bin}/mkdir           rix,
 
-  @{bin}/xdg-screensaver rCx -> xdg-screensaver,
-
+  @{bin}/xdg-screensaver rPx,
   @{bin}/youtube-dl     rPUx,
   @{bin}/yt-dlp         rPUx,
   @{lib}/firefox/firefox rPx,
@@ -63,29 +62,6 @@ profile hypnotix @{exec_path} {
   # Silencer
   deny @{lib}/hypnotix/** w,
 
-  profile xdg-screensaver {
-    include <abstractions/base>
-    include <abstractions/consoles>
-
-    @{bin}/xdg-screensaver mr,
-
-    @{sh_path}          rix,
-    @{bin}/mv           rix,
-    @{bin}/{,e}grep     rix,
-    @{bin}/sed          rix,
-    @{bin}/which{,.debianutils}        rix,
-    @{bin}/xset         rix,
-    @{bin}/xautolock    rix,
-    @{bin}/dbus-send    rix,
-
-    owner @{HOME}/.Xauthority r,
-
-    # file_inherit
-    /dev/dri/card@{int} rw,
-    network inet stream,
-    network inet6 stream,
-  }
-
   include if exists <local/hypnotix>
 }
 

apparmor.d/profiles-g-l/linuxqq

@@ -27,7 +27,6 @@ profile linuxqq @{exec_path} flags=(attach_disconnected) {
 
     @{exec_path} mrix,
 
-    @{sh_path} r,
     @{bin}/grep rix,
     @{lib_dirs}/chrome_crashpad_handler ix,
     @{lib_dirs}/resources/app/{,**} m,