feat(profiles): general update.

apparmor.d/profiles-s-z/snapd

@@ -72,14 +72,17 @@ profile snapd @{exec_path} {
   /snap/snapd/[0-9]*/usr/lib/snapd/snap-seccomp     rPx,
   /snap/snapd/[0-9]*/usr/lib/snapd/snap-update-ns   rPx,
   /snap/snapd/[0-9]*/usr/lib/snapd/snapd            rix,
+  /snap/snapd/[0-9]*/usr/bin/fc-cache-*             rPx -> fc-cache,
   /snap/snapd/[0-9]*/usr/bin/xdelta3                rix, # TODO: rPx ?
 
+  /usr/share/bash-completion/completions/{,**} r,
   /usr/share/dbus-1/{system,session}.d/{,snapd*} r,
   /usr/share/dbus-1/services/*snap* r,
   /usr/share/polkit-1/actions/{,**/} r,
 
   /etc/dbus-1/system.d/{,**/} r,
   /etc/fstab r,
+  /etc/mime.types r,
   /etc/modprobe.d/{,**/} r,
   /etc/modules-load.d/{,**/} r,
   /etc/systemd/system/{,**/} r,
@@ -101,8 +104,8 @@ profile snapd @{exec_path} {
   /tmp/syscheck-squashfs-[0-9]* rw,
   /tmp/read-file[0-9]*/{,**} rw,
 
-  owner @{HOME}/ r,
-  owner @{HOME}/snap/{,**} rw,
+  @{HOME}/ r,
+  @{HOME}/snap/{,**} rw,
 
   owner @{run}/mount/ rw,
   owner @{run}/mount/utab{,.*} rw,
@@ -113,14 +116,14 @@ profile snapd @{exec_path} {
 
   @{run}/snapd-snap.socket rw,
   @{run}/snapd.socket rw,
-  @{run}/snapd/lock/core[0-9]*.lock rwk,
+  @{run}/snapd/lock/*.lock rwk,
   @{run}/systemd/notify rw,
   @{run}/systemd/private rw,
 
   @{sys}/fs/cgroup/{,*/} r,
   @{sys}/fs/cgroup/system.slice/{,**/} r,
   @{sys}/fs/cgroup/user.slice/ r,
-  @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/**/ r,
+  @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/{,**/} r,
   @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
   @{sys}/kernel/security/apparmor/features/ r,
   @{sys}/kernel/security/apparmor/profiles r,

apparmor.d/profiles-s-z/spice-vdagentd

@@ -13,9 +13,7 @@ profile spice-vdagentd @{exec_path} flags=(attach_disconnected) {
 
   capability sys_nice,
 
-  dbus receive
-       bus=system
-       path=/org/freedesktop/login[0-9]/session/_[0-9]*
+  dbus receive bus=system path=/org/freedesktop/login[0-9]/session/_[0-9]*
        interface=org.freedesktop.login[0-9].Session
        member=Unlock,
 

apparmor.d/profiles-s-z/wireplumber

@@ -45,6 +45,7 @@ profile wireplumber @{exec_path} {
   @{sys}/devices/**/sound/**/uevent r,
   @{sys}/devices/pci[0-9]*/**/modalias r,
   @{sys}/devices/pci[0-9]*/**/video4linux/video[0-9]*/uevent r,
+  @{sys}/devices/system/cpu/possible r,
   @{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name,board_vendor,bios_vendor} r,
 
   /dev/snd/ r,