feat(profile): general update.

apparmor.d/profiles-m-r/mount-nfs

@@ -60,7 +60,6 @@ profile mount-nfs @{exec_path} flags=(complain) {
   owner @{run}/mount/utab{,.*} rw,
   owner @{run}/rpc.statd.lock wk,
 
-        @{PROC}/filesystems r,
   owner @{PROC}/@{pid}/mountinfo r,
 
   include if exists <local/mount-nfs>

apparmor.d/profiles-m-r/qbittorrent

@@ -7,9 +7,6 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{FIREFOX_BIN}  = @{lib}/firefox{,-esr}/firefox
-@{FIREFOX_BIN} += /opt/firefox{,-esr}/firefox
-
 @{exec_path} = @{bin}/qbittorrent
 profile qbittorrent @{exec_path} {
   include <abstractions/base>
@@ -20,25 +17,17 @@ profile qbittorrent @{exec_path} {
   include <abstractions/bus/org.kde.StatusNotifierWatcher>
   include <abstractions/consoles>
   include <abstractions/dconf-write>
-  include <abstractions/dri-common>
-  include <abstractions/dri-enumerate>
+  include <abstractions/desktop>
   include <abstractions/fontconfig-cache-read>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
+  include <abstractions/graphics>
   include <abstractions/ibus>
-  include <abstractions/mesa>
   include <abstractions/nameservice-strict>
-  include <abstractions/nvidia>
   include <abstractions/openssl>
   include <abstractions/private-files-strict>
   include <abstractions/qt5-compose-cache-write>
   include <abstractions/qt5-settings-write>
-  include <abstractions/qt5>
   include <abstractions/ssl_certs>
   include <abstractions/user-download-strict>
-  include <abstractions/wayland>
-  include <abstractions/X-strict>
 
   signal send set=(term, kill) peer=qbittorrent//python3,
 
@@ -82,21 +71,19 @@ profile qbittorrent @{exec_path} {
   @{bin}/python3.@{int}  rCx -> python, # For "search engine"
 
   # Allowed apps to open
-  @{bin}/spacefm         rPx,
-  @{bin}/smplayer        rPx,
-  @{bin}/vlc             rPx,
-  @{bin}/mpv             rPx,
-  @{bin}/geany           rPx,
-  @{bin}/viewnior       rPUx,
-  @{bin}/qpdfview        rPx,
   @{bin}/ebook-viewer    rPx,
+  @{bin}/geany           rPx,
+  @{bin}/mpv             rPx,
   @{bin}/nautilus        rPx,
-  @{FIREFOX_BIN}         rPx,
+  @{bin}/qpdfview        rPx,
+  @{bin}/smplayer        rPx,
+  @{bin}/spacefm         rPx,
+  @{bin}/viewnior       rPUx,
+  @{bin}/vlc             rPx,
+  @{browsers_path}       rPx,
 
   /usr/share/GeoIP/GeoIP.dat r,
   /usr/share/gvfs/remote-volume-monitors/{,*} r,
-  /usr/share/hwdata/*.ids r,
-  /usr/share/qt5ct/** r,
 
   owner @{user_cache_dirs}/ rw,
   owner @{user_cache_dirs}/#@{int} rw,