feat(profile): general update.

apparmor.d/groups/kde/baloorunner

@@ -30,5 +30,7 @@ profile baloorunner @{exec_path} {
 
   @{PROC}/sys/kernel/core_pattern r,
 
+  /dev/tty r,
+
   include if exists <local/baloorunner>
 }

apparmor.d/groups/kde/dolphin

@@ -15,6 +15,7 @@ profile dolphin @{exec_path} {
   include <abstractions/bus/org.freedesktop.UDisks2>
   include <abstractions/deny-sensitive-home>
   include <abstractions/devices-usb>
+  include <abstractions/disks-read>
   include <abstractions/graphics>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
@@ -45,9 +46,15 @@ profile dolphin @{exec_path} {
 
   # Full access to user's data
   / r,
+  /*/ r,
+  @{bin}/ r,
+  @{lib}/ r,
+  @{MOUNTDIRS}/ r,
+  @{MOUNTS}/ r,
+  @{MOUNTS}/** rw,
   owner @{HOME}/{,**} rw,
-
-  /var/lib/flatpak/exports/share/mime/ r,
+  owner @{run}/user/@{uid}/{,**} rw,
+  owner /tmp/{,**} rw,
 
   # Silence non user's data
   deny /boot/{,**} r,
@@ -65,7 +72,7 @@ profile dolphin @{exec_path} {
   owner @{user_config_dirs}/dolphinrc.@{rand6} rwl -> @{user_config_dirs}/#@{int},
   owner @{user_config_dirs}/dolphinrc.lock rwk,
   owner @{user_config_dirs}/kde.org/#@{int} rw,
-  owner @{user_config_dirs}/kde.org/UserFeedback.org.kde.dolphin.conf{,.@{rand6}} rwlk -> @{user_config_dirs}/kde.org/#@{int},
+  owner @{user_config_dirs}/kde.org/UserFeedback.org.kde.dolphin.conf{,.*} rwlk -> @{user_config_dirs}/kde.org/#@{int},
   owner @{user_config_dirs}/kde.org/UserFeedback.org.kde.dolphin.conf.lock rwk,
 
   owner @{user_config_dirs}/session/ rw,

apparmor.d/groups/kde/konsole

@@ -36,23 +36,24 @@ profile konsole @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   /usr/share/sounds/** r,
 
   /etc/xdg/konsolerc r,
+  /etc/xdg/kshorturifilterrc r,
   /etc/xdg/menus/{,**} r,
   /etc/xdg/ui/ui_standards.rc r,
 
   owner @{HOME}/@{XDG_SSH_DIR}/config r,
 
-  owner @{user_config_dirs}/#@{int} rwl,
+  owner @{user_cache_dirs}/icon-cache.kcache rw,
   owner @{user_cache_dirs}/ksycoca{5,6}_* r,
 
+  owner @{user_config_dirs}/#@{int} rwl,
   owner @{user_config_dirs}/breezerc r,
   owner @{user_config_dirs}/konsolerc{,*} rwlk,
   owner @{user_config_dirs}/konsolesshconfig rwl -> @{user_config_dirs}/#@{int},
   owner @{user_config_dirs}/konsolesshconfig.@{rand6} rwl -> @{user_config_dirs}/#@{int},
   owner @{user_config_dirs}/konsolesshconfig.lock rwk,
+  owner @{user_config_dirs}/kservicemenurc r,
   owner @{user_config_dirs}/menus/{,**} r,
 
-  owner @{user_cache_dirs}/icon-cache.kcache rw,
-
   owner @{user_share_dirs}/color-schemes/{,**} r,
   owner @{user_share_dirs}/konsole/ rw,
   owner @{user_share_dirs}/konsole/** rwlk,

apparmor.d/groups/kde/kwin_wayland

@@ -52,6 +52,9 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
   /etc/machine-id r,
   /var/lib/dbus/machine-id r,
 
+  / r,
+  owner @{HOME}/ r,
+
   owner @{sddm_cache_dirs}/#@{int} rwk,
   owner @{sddm_cache_dirs}/fontconfig/* rwk,
   owner @{sddm_cache_dirs}/fontconfig/*-le64.cache-@{int}.LCK l -> @{sddm_cache_dirs}/fontconfig/*-le64.cache-@{int}.TMP-@{rand6},
@@ -73,7 +76,7 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
   owner @{user_cache_dirs}/ksycoca{5,6}_* r,
   owner @{user_cache_dirs}/ksycoca{5,6}_* rwkl -> @{user_cache_dirs}/#@{int},
   owner @{user_cache_dirs}/kwin/ rw,
-  owner @{user_cache_dirs}/kwin/** rwl -> @{user_cache_dirs}/kwin/**,
+  owner @{user_cache_dirs}/kwin/** rwkl -> @{user_cache_dirs}/kwin/**,
   owner @{user_cache_dirs}/plasma_theme_*.kcache rw,
   owner @{user_cache_dirs}/plasma-svgelements rw,
   owner @{user_cache_dirs}/plasma-svgelements.@{rand6} rwl -> @{user_cache_dirs}/#@{int},

apparmor.d/groups/kde/plasmashell

@@ -78,8 +78,9 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
   /etc/fstab r,
   /etc/ksysguarddrc r,
   /etc/machine-id r,
-  /etc/sensors3.conf r,
+  /etc/os-release r,
   /etc/sensors.d/ r,
+  /etc/sensors3.conf r,
   /etc/xdg/** r,
 
   /var/lib/AccountsService/icons/* r,

apparmor.d/groups/kde/sddm

@@ -42,6 +42,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   signal (receive) set=(hup) peer=@{p_systemd},
   signal (send) set=(kill, term) peer=startplasma,
   signal (send) set=(kill, term) peer=xorg,
+  signal (send) set=(kill, term) peer=xsetroot,
   signal (send) set=(term) peer=kwin_wayland,
   signal (send) set=(term) peer=sddm-greeter,
   signal (send) set=(term) peer=startplasma-wayland,
@@ -76,6 +77,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   @{bin}/disable-paste rix,
   @{bin}/locale        rix,
   @{bin}/manpath       rix,
+  @{bin}/mktemp        rix,
   @{bin}/pidof         rix,
   @{bin}/readlink      rix,
   @{bin}/realpath      rix,
@@ -151,6 +153,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   owner @{sddm_cache_dirs}/sddm-greeter/qmlcache/*.jsc mrw,
   owner @{sddm_cache_dirs}/sddm-greeter/qmlcache/*.qmlc mrw,
 
+  owner @{HOME}/ r,
   owner @{HOME}/.local/ w,
   owner @{HOME}/.Xauthority rw,
 

apparmor.d/groups/kde/sddm-greeter

@@ -37,6 +37,7 @@ profile sddm-greeter @{exec_path} {
   /usr/share/hunspell/** r,
 
   /etc/fstab r,
+  /etc/os-release r,
   /etc/sddm.conf r,
   /etc/sddm.conf.d/{,*} r,
   /etc/xdg/plasmarc r,