feat(profiles): general update. See #101

apparmor.d/groups/freedesktop/pipewire

@@ -61,7 +61,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
 
   owner @{run}/user/@{uid}/pipewire-[0-9]*.lock rwk,
 
-  @{run}/udev/data/c236:[0-9]* r,
+  @{run}/udev/data/c23[0-9]:[0-9]* r,
   @{run}/udev/data/c50[0-9]:[0-9]* r,
   @{run}/udev/data/c81:[0-9]*  r,       # For video4linux
 

apparmor.d/groups/freedesktop/xdg-settings

@@ -33,14 +33,15 @@ profile xdg-settings @{exec_path} {
   /{usr/,}bin/xdg-mime     rPx,
   /{usr/,}bin/xprop        rPx,
 
+  /usr/share/applications/{,*} r,
   /usr/share/terminfo/x/xterm-256color r,
-  /usr/share/applications/ r,
   /usr/share/ubuntu/applications/ r,
 
   /etc/xdg/xfce4/helpers.rc r,
   /etc/machine-id r,
   /var/lib/dbus/machine-id r,
 
+  /var/lib/flatpak/exports/share/applications/{,*} r,
   /var/lib/snapd/desktop/applications/{,*} r,
 
   owner @{HOME}/ r,

apparmor.d/groups/freedesktop/xhost

@@ -24,5 +24,8 @@ profile xhost @{exec_path} {
   /dev/tty[0-9]* rw,
   owner @{HOME}/.xsession-errors w,
 
+  # Silencer
+  deny @{user_share_dirs}/gvfs-metadata/* r,
+
   include if exists <local/xhost>
 }

apparmor.d/groups/freedesktop/xrdb

@@ -16,6 +16,7 @@ profile xrdb @{exec_path} {
 
   /{usr/,}bin/{,ba,da}sh                  rix,
   /{usr/,}bin/{,@{multiarch}-}cpp-[0-9]*  rix,
+  /{usr/,}bin/cpp                         rix,
   /{usr/,}lib/gcc/@{multiarch}/[0-9]*/cc1 rix,
   /{usr/,}lib/llvm-[0-9]*/bin/clang       rix,
 
@@ -27,7 +28,6 @@ profile xrdb @{exec_path} {
   owner @{HOME}/.Xresources r,
   owner @{user_config_dirs}/.Xresources r,
   owner @{user_config_dirs}/Xresources/.Xresources r,
-  # If the .Xresources file includes some additional files
   owner @{user_config_dirs}/Xresources/* r,
 
   owner /tmp/xauth-[0-9]*-_[0-9] r,
@@ -37,6 +37,8 @@ profile xrdb @{exec_path} {
   owner /dev/tty[0-9]* rw,
   owner @{HOME}/.xsession-errors w,
 
+  /dev/tty rw,
+
   include if exists <local/xrdb>
 }