feat(profiles): general update.

apparmor.d/profiles-a-f/cups-notifier-dbus

@@ -10,7 +10,11 @@ include <tunables/global>
 profile cups-notifier-dbus @{exec_path} {
   include <abstractions/base>
 
+  signal (receive) set=(term) peer=cupsd,
+
   @{exec_path} mr,
  
+  /tmp/cups-dbus-notifier-lockfile rwk,
+  
   include if exists <local/cups-notifier-dbus>
 }

apparmor.d/profiles-a-f/cupsd

@@ -41,6 +41,8 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
   network rose dgram,
   network x25 seqpacket,
 
+  signal (send) set=(term) peer=cups-notifier-dbus,
+
   @{exec_path} mr,
 
   @{bin}/{,ba,da}sh          rix,

apparmor.d/profiles-a-f/evince

@@ -14,7 +14,7 @@ profile evince @{exec_path} {
   include <abstractions/bus/org.a11y>
   include <abstractions/bus/org.freedesktop.portal.Desktop>
   include <abstractions/dconf-write>
-  include <abstractions/gnome>
+  include <abstractions/gnome-strict>
   include <abstractions/ibus>
   include <abstractions/nameservice-strict>
   include <abstractions/openssl>
@@ -50,7 +50,6 @@ profile evince @{exec_path} {
   /usr/share/ghostscript/{,**} r,
   /usr/share/poppler/{,**} r,
   /usr/share/thumbnailers/{,*} r,
-  /usr/share/themes/{,**} r,
 
   owner @{user_share_dirs}/ r,
   owner @{user_share_dirs}/gvfs-metadata/{,*} r,

apparmor.d/profiles-a-f/file-roller

@@ -29,6 +29,7 @@ profile file-roller @{exec_path} {
 
   # Archivers
   @{bin}/7z            rix,
+  @{bin}/ar            rix,
   @{bin}/bzip2         rix,
   @{bin}/cpio          rix,
   @{bin}/gzip          rix,