feat(profiles): general update.

apparmor.d/groups/gnome/gjs-console

@@ -49,6 +49,8 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
   owner @{run}/user/@{uid}/gdm/Xauthority r,
         @{run}/user/@{uid}/wayland-cursor-shared-* rw,
 
+  @{sys}/devices/system/cpu/possible r,
+
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/task/ r,
   owner @{PROC}/@{pid}/task/@{tid}/stat r,

apparmor.d/groups/gnome/gnome-characters-backgroudservice

@@ -10,14 +10,23 @@ include <tunables/global>
 profile gnome-characters-backgroudservice @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
+  include <abstractions/dbus-session-strict>
 
   @{exec_path} mr,
 
   /{usr/,}bin/gjs-console rix,
 
+  /usr/share/glib-2.0/schemas/gschemas.compiled r,
   /usr/share/icons/{,**} r,
+  /usr/share/org.gnome.Characters/org.gnome.Characters.BackgroundService.*.gresource r,
   /usr/share/themes/{,**} r,
   /usr/share/X11/xkb/{,**} r,
 
+  /etc/gtk-3.0/settings.ini r,
+
+  owner @{PROC}/@{pid}/mounts r,
+  owner @{PROC}/@{pid}/stat r,
+  owner @{PROC}/@{pid}/task/@{tid}/stat r,
+
   include if exists <local/gnome-characters-backgroudservice>
 }

apparmor.d/groups/gnome/gnome-control-center

@@ -49,6 +49,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/bwrap                                  rPUx,
   /{usr/,}bin/openvpn                                 rPx,
   /{usr/,}bin/passwd                                  rPx,
+  /{usr/,}lib/@{multiarch}/webkit2gtk-{3,4}.0/WebKitNetworkProcess rix,
   /{usr/,}lib/webkit2gtk-{3,4}.0/WebKitNetworkProcess rix,
   /usr/share/language-tools/language2locale           rix,
 
@@ -70,6 +71,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   /usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,
   /usr/share/zoneinfo/{,**} r,
 
+  /etc/machine-info r,
   /etc/pipewire/client.conf.d/ r,
   /etc/security/pwquality.conf r,
   /etc/security/pwquality.conf.d/{,**} r,
@@ -98,6 +100,8 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
 
   owner @{run}/user/@{uid}/gnome-shell-disable-extensions w,
   owner @{run}/user/@{uid}/pipewire-[0-9]* rw,
+  owner @{run}/user/@{uid}/webkitgtk-wayland-compositor-@{uuid} rwk,
+  owner @{run}/user/@{uid}/webkitgtk-wayland-compositor-@{uuid}.lock rwk,
   owner @{run}/user/@{uid}/webkitgtk/{,**} rw,
         @{run}/cups/cups.sock rw,
         @{run}/samba/ rw,
@@ -120,9 +124,11 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   @{sys}/class/input/ r,
   @{sys}/devices/**/{name,vendor,product,uevent} r,
   @{sys}/devices/platform/**/uevent r,
+  @{sys}/devices/system/cpu/possible r,
   @{sys}/devices/virtual/**/uevent r,
   @{sys}/devices/virtual/dmi/id/chassis_type r,
   @{sys}/devices/virtual/thermal/thermal_zone[0-9]/hwmon[0-9]/temp* r,
+  @{sys}/firmware/acpi/pm_profile r,
 
   owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/{,**} rw,
 

apparmor.d/groups/gnome/gnome-control-center-print-renderer

@@ -39,6 +39,8 @@ profile gnome-control-center-print-renderer @{exec_path} {
   owner @{run}/user/@{uid}/gdm/Xauthority r,
   owner @{run}/user/@{uid}/wayland-[0-9]* rw,
 
+  @{sys}/devices/system/cpu/possible r,
+
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/comm r,
 

apparmor.d/groups/gnome/gnome-shell

@@ -195,7 +195,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   owner @{run}/user/@{uid}/gnome-shell-disable-extensions rw,
   owner @{run}/user/@{uid}/gnome-shell/{,**} rw,
   owner @{run}/user/@{uid}/gvfsd/socket-[0-9A-Za-z]* rw,
-  owner @{run}/user/@{uid}/snap.snapd-desktop-integration/wayland-cursor-shared-* rw,
+  owner @{run}/user/@{uid}/snap.snap*/wayland-cursor-shared-* rw,
   owner @{run}/user/@{uid}/systemd/notify rw,
   owner @{run}/user/@{uid}/wayland-[0-9].lock rwk,
 
@@ -245,6 +245,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
   @{sys}/devices/pci[0-9]*/**/drm/ r,
   @{sys}/devices/pci[0-9]*/**/input[0-9]*/{properties,name} r,
   @{sys}/devices/pci[0-9]*/**/net/*/statistics/{rx_bytes,tx_bytes} r,
+  @{sys}/devices/system/cpu/possible r,
   @{sys}/devices/virtual/net/*/statistics/{rx_bytes,tx_bytes} r,
 
   owner @{PROC}/@{pid}/comm r,