Profile update.

apparmor.d/groups/gnome/gnome-session-binary

@@ -9,6 +9,8 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/gnome-session-binary
 profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
+  include <abstractions/dri-common>
+  include <abstractions/dri-enumerate>
   include <abstractions/gtk>
   include <abstractions/nameservice-strict>
 
@@ -40,12 +42,15 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
   /usr/share/applications/org.gnome.Shell.desktop r,
   /usr/share/gdm/greeter-dconf-defaults r,
   /usr/share/glib-2.0/schemas/gschemas.compiled r,
+  /usr/share/gnome-session/hardware-compatibility r,
   /usr/share/gnome-session/sessions/*.session r,
 
   owner @{user_config_dirs}/gnome-session/saved-session/ r,
   owner @{user_config_dirs}/gtk-3.0/bookmarks rw,
   owner @{user_config_dirs}/gtk-3.0/bookmarks.[0-9A-Z]* rw,
 
+  owner @{user_cache_dirs}/mesa_shader_cache/index rw,
+
   # Users xdg
   owner @{user_config_dirs}/user-dirs.dirs r,
   owner @{user_config_dirs}/user-dirs.locale r,
@@ -66,18 +71,22 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
   /tmp/.ICE-unix/[0-9]* rw,
 
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* r,
+  owner @{run}/user/@{uid}/gdm/Xauthority r,
   owner @{run}/user/@{uid}/gnome-session-leader-fifo rw,
   owner @{run}/user/@{uid}/ICEauthority{,-[a-z]} rwl,
         @{run}/systemd/inhibit/[0-9]*.ref rw,
-        @{run}/systemd/sessions/[0-9] r,
-        @{run}/systemd/sessions/[0-9].ref rw,
+        @{run}/systemd/sessions/[0-9]* r,
+        @{run}/systemd/sessions/[0-9]*.ref rw,
         @{run}/systemd/users/@{uid} r,
 
   @{sys}/devices/**/{vendor,device} r,
 
   owner @{PROC}/@{pid}/loginuid r,
+  owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/fd/ r,
         @{PROC}/@{pid}/cgroup r,
+        @{PROC}/cmdline r,
+        @{PROC}/sys/dev/i915/perf_stream_paranoid r,
 
   /dev/null r,
   /dev/tty rw,