feat(profile): general update

apparmor.d/profiles-a-f/agetty

@@ -23,8 +23,6 @@ profile agetty @{exec_path} {
 
   @{bin}/login rPx,
 
-  /usr/share/subiquity/console-conf-wrapper rPx, # only:core22
-
   @{etc_rw}/issue r,
   /{,usr/}lib/os-release r,
   /{etc,run,lib,usr/lib}/issue r,

apparmor.d/profiles-a-f/dkms

@@ -63,6 +63,7 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
   @{lib}/modules/*/build/scripts/**            rix,
   @{lib}/modules/*/build/tools/objtool/objtool rix,
 
+  /var/lib/dkms/**/build/* rix,
   /var/lib/dkms/**/configure rix,
   /var/lib/dkms/**/dkms.postbuild rix,
 

apparmor.d/profiles-a-f/file-roller

@@ -14,8 +14,12 @@ profile file-roller @{exec_path} {
   include <abstractions/dconf-write>
   include <abstractions/fonts>
   include <abstractions/freedesktop.org>
+  include <abstractions/gtk>
+  include <abstractions/nameservice-strict>
+  include <abstractions/user-download-strict>
   include <abstractions/user-write>
   include <abstractions/wayland>
+  include <abstractions/X-strict>
 
   dbus bind bus=session name=org.gnome.ArchiveManager1,
 
@@ -25,16 +29,16 @@ profile file-roller @{exec_path} {
 
   # Archivers
   @{bin}/7z            rix,
-  @{lib}/p7zip/7z      rix,
-  @{bin}/unrar-nonfree rix,
-  @{bin}/zip           rix,
-  @{bin}/unzip         rix,
-  @{bin}/tar           rix,
-  @{bin}/xz            rix,
   @{bin}/bzip2         rix,
   @{bin}/cpio          rix,
   @{bin}/gzip          rix,
+  @{bin}/tar           rix,
+  @{bin}/unrar-nonfree rix,
+  @{bin}/unzip         rix,
+  @{bin}/xz            rix,
+  @{bin}/zip           rix,
   @{bin}/zstd          rix,
+  @{lib}/p7zip/7z      rix,
 
   /usr/share/themes/{,**} r,
   /usr/share/X11/xkb/{,**} r,