feat(profile): firefox: handle nnp with keepassxc-proxy.

apparmor.d/profiles-g-l/keepassxc-proxy

@@ -12,14 +12,14 @@ profile keepassxc-proxy @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
 
-  signal (receive) set=(term, kill),
-
   network inet dgram,
   network inet6 dgram,
   network inet stream,
   network inet6 stream,
   network netlink raw,
 
+  signal receive set=(term, kill) peer=firefox,
+
   @{exec_path} mr,
 
   /usr/share/icons/*/index.theme r,
@@ -32,7 +32,7 @@ profile keepassxc-proxy @{exec_path} {
   # file_inherit
   deny owner @{run}/user/@{uid}/.[a-zA-Z]*/{,s} rw,
   deny owner @{run}/user/@{uid}/kpxc_server rw,
-  deny       /dev/shm/org.chromium.* rw,
+  deny       /dev/shm/org.chromium.@{rand6} rw,
   deny owner /dev/shm/org.mozilla.ipc.@{int}.@{int} rw,
   deny owner @{HOME}/.mozilla/** rw,
   deny owner @{user_cache_dirs}/mozilla/** rw,