feat(profile): general update.

apparmor.d/profiles-s-z/snap

@@ -64,7 +64,7 @@ profile snap @{exec_path} {
   owner /tmp/snapd-auto-import-mount-@{int}/ rw,
 
         @{run}/user/@{uid}/bus rw,
-  owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* r,
+  owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} r,
   owner @{run}/user/@{uid}/gdm/Xauthority r,
   owner @{run}/user/@{uid}/snapd-session-agent.socket rw,
   owner @{run}/user/@{uid}/systemd/notify rw,

apparmor.d/profiles-s-z/steam-fossilize

@@ -23,7 +23,7 @@ profile steam-fossilize @{exec_path} flags=(attach_disconnected) {
   owner @{user_share_dirs}/Steam/steamapps/shadercache/@{int}/nvidiav@{int}/GLCache/ rw,
   owner @{user_share_dirs}/Steam/steamapps/shadercache/@{int}/nvidiav@{int}/GLCache/** rwk,
 
-  owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
+  owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw,
 
   @{sys}/devices/system/node/node@{int}/cpumap r,
 

apparmor.d/profiles-s-z/steam-gameoverlayui

@@ -11,8 +11,8 @@ include <tunables/global>
 profile steam-gameoverlayui @{exec_path} {
   include <abstractions/base>
   include <abstractions/audio>
-  include <abstractions/fonts>
-  include <abstractions/nvidia>
+  include <abstractions/desktop>
+  include <abstractions/graphics>
 
   network inet stream,
   network inet6 stream,
@@ -40,11 +40,6 @@ profile steam-gameoverlayui @{exec_path} {
   owner @{user_share_dirs}/Steam/resource/{,**} rk,
   owner @{user_share_dirs}/Steam/userdata/@{int}/{,**} rk,
 
-  owner /var/cache/fontconfig/ rw,
-
-  owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
-  owner @{run}/user/@{uid}/gdm/Xauthority r,
-
   owner /dev/shm/u@{uid}-Shm_@{hex} rw,
   owner /dev/shm/u@{uid}-ValveIPCSharedObj-* rwk,
   owner /dev/shm/ValveIPCSHM_@{uid} rw,
@@ -53,12 +48,6 @@ profile steam-gameoverlayui @{exec_path} {
   owner /tmp/steam_chrome_overlay_uid@{uid}_spid@{pids} rw,
   owner /tmp/miles_image_* mrw,
 
-  @{sys}/ r,
-  @{sys}/devices/system/cpu/cpu@{int}/** r,
-  @{sys}/kernel/ r,
-
-  @{PROC}/version r,
-
   deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
 
   include if exists <local/steam-gameoverlayui>