feat(profiles): general update.

apparmor.d/profiles-g-l/gsettings

@@ -11,15 +11,20 @@ profile gsettings @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
 
+  unix (connect, receive, send) type=stream peer=(addr="@/tmp/dbus-*"),
+
   @{exec_path} mr,
 
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/dconf/profile/gdm r,
   /usr/share/gdm/greeter-dconf-defaults r,
 
-  /var/lib/gdm/.config/dconf/user r,
+  /var/lib/gdm{3,}/.config/dconf/user r,
+  /var/lib/gdm{3,}/greeter-dconf-defaults r,
 
   /dev/tty[0-9]* rw,
 
+  owner @{run}/user/@{uid}/bus rw,
+
   include if exists <local/gsettings>
 }

apparmor.d/profiles-g-l/keepassxc

@@ -99,6 +99,7 @@ profile keepassxc @{exec_path} {
 
         /dev/shm/#[0-9]*[0-9] rw,
         /dev/tty rw,
+        /dev/urandom rw,
   owner /dev/tty[0-9]* rw,
 
   # Silencer