feat(profile): cleanup log from well known programs.

apparmor.d/profiles-g-l/gsettings

@@ -23,6 +23,14 @@ profile gsettings @{exec_path} flags=(attach_disconnected) {
   owner @{desktop_config_dirs}/dconf/user rw,
   owner @{DESKTOP_HOME}/greeter-dconf-defaults r,
 
+  # file_inherit
+  deny network netlink raw,
+  deny /etc/nsswitch.conf r,
+  deny /etc/passwd r,
+  deny /opt/*/** r,
+  deny owner @{user_config_dirs}/[^d]*/** rw, # all but dconf
+  deny owner /dev/shm/.org.chromium.Chromium.@{rand6} rw,
+
   include if exists <local/gsettings>
 }