feat(profile): general update.

apparmor.d/profiles-s-z/snapd

@@ -127,7 +127,7 @@ profile snapd @{exec_path} {
   /tmp/read-file[0-9]*/{,**} rw,
 
   /boot/ r,
-  /boot/grub/grubenv r, 
+  /boot/grub/grubenv r,
 
   / r,
   /home/ r,

apparmor.d/profiles-s-z/spice-vdagent

@@ -40,6 +40,7 @@ profile spice-vdagent @{exec_path} {
 
   /etc/pipewire/client.conf r,
 
+  /var/lib/gdm{3,}/.config/user-dirs.dirs r,
   /var/lib/nscd/passwd r,
 
   owner @{user_config_dirs}/user-dirs.dirs r,

apparmor.d/profiles-s-z/update-ca-certificates

@@ -36,9 +36,9 @@ profile update-ca-certificates @{exec_path} {
   @{bin}/wc         rix,
 
   @{lib}/ca-certificates/update.d/ r,
-  @{lib}/ca-certificates/update.d/* rix, 
+  @{lib}/ca-certificates/update.d/* rix,
   /etc/ca-certificates/update.d/ r,
-  /etc/ca-certificates/update.d/* rix, 
+  /etc/ca-certificates/update.d/* rix,
 
   /usr/share/p11-kit/modules/{,*} r,
 
@@ -56,8 +56,6 @@ profile update-ca-certificates @{exec_path} {
         /tmp/ r,
   owner /tmp/ca-certificates{,.crt}.tmp.* rw,
 
-  @{PROC}/filesystems r,
-
   /dev/tty rw,
 
   include if exists <local/update-ca-certificates>

apparmor.d/profiles-s-z/wireplumber

@@ -38,7 +38,7 @@ profile wireplumber @{exec_path} {
   /opt/intel/oneapi/{compiler,lib,mkl}/**.so* mr,
 
   /usr/share/alsa-card-profile/{,**} r,
-  /usr/share/spa-*/bluez[0-9]*/{,*} r,
+  /usr/share/spa-*/bluez@{int}/{,*} r,
   /usr/share/wireplumber/{,**} r,
 
   /etc/machine-id r,