feat(profile): general update.

apparmor.d/profiles-s-z/YACReader

@@ -37,8 +37,6 @@ profile YACReader @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   owner @{user_share_dirs}/YACReader/YACReader/ rw,
   owner @{user_share_dirs}/YACReader/YACReader/** rwlk,
 
-  /dev/shm/ r,
-
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/mountinfo r,
 

apparmor.d/profiles-s-z/sfdisk

@@ -10,15 +10,9 @@ include <tunables/global>
 @{exec_path} = @{bin}/sfdisk
 profile sfdisk @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/disks-write>
 
-  # Needed to avoid the following error:
-  #  ioctl(3, BLKRRPART)              = -1 EACCES (Permission denied)
-  #
-  #  Checking that no-one is using this disk right now ... FAILED
-  #  This disk is currently in use - repartitioning is probably a bad idea.
-  #  Umount all file systems, and swapoff all swap partitions on this disk.
-  #  Use the --no-reread flag to suppress this check.
   capability sys_admin,
 
   @{exec_path} mr,

apparmor.d/profiles-s-z/steam

@@ -327,7 +327,6 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted) {
     owner @{tmp}/pressure-vessel-*-@{rand6}/** rwlk -> @{tmp}/pressure-vessel-*-@{rand6}/**,
     owner @{tmp}/steam_chrome_shmem_uid@{uid}_spid@{int} rw,
 
-          /dev/shm/ r,
     owner /dev/shm/.org.chromium.Chromium.@{rand6} rw,
     owner /dev/shm/u@{uid}-Shm_@{hex4}@{h} rw,
     owner /dev/shm/u@{uid}-Shm_@{hex6} rw,

apparmor.d/profiles-s-z/steam-runtime

@@ -42,7 +42,7 @@ profile steam-runtime @{exec_path} flags=(attach_disconnected) {
   @{app_dirs}/@{runtime}/pressure-vessel/@{bin}/pressure-vessel-* rix,
   @{app_dirs}/@{runtime}/pressure-vessel/@{lib}/** mr,
   @{app_dirs}/@{runtime}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-capsule-capture-libs rix,
-  @{app_dirs}/@{runtime}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-detect-platform rix,
+  @{app_dirs}/@{runtime}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-detect-* rix,
   @{app_dirs}/@{runtime}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-inspect-library rix,
   @{app_dirs}/@{runtime}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/srt-bwrap rpx -> steam-game-proton,
   @{app_dirs}/@{runtime}/run rix,

apparmor.d/profiles-s-z/thunderbird

@@ -158,8 +158,7 @@ profile thunderbird @{exec_path} {
   owner @{PROC}/@{pid}/task/@{tid}/stat r,
   owner @{PROC}/@{pid}/uid_map w, # If kernel.unprivileged_userns_clone = 1
 
-        /dev/shm/ r,
-  owner /dev/shm/org.chromium.* rw,
+  owner /dev/shm/org.chromium.@{rand6} rw,
   owner /dev/shm/org.mozilla.ipc.@{pid}.@{int} rw,
   owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
 

apparmor.d/profiles-s-z/udisksd

@@ -119,6 +119,7 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
   @{sys}/bus/ r,
   @{sys}/bus/pci/slots/ r,
   @{sys}/bus/pci/slots/@{int}/address r,
+  @{sys}/bus/scsi/devices/ r,
   @{sys}/class/ r,
   @{sys}/class/nvme-subsystem/ r,
   @{sys}/class/nvme/ r,