feat(profiles): ensure child-open is available.

apparmor.d/groups/children/child-open

@@ -93,7 +93,6 @@ profile child-open {
   @{bin}/xbrlapi 	   rPx,
   @{lib}/libreoffice/program/{soffice,soffice.bin,oosplash} rPUx,
 
-  
   include if exists <usr/child-open.d>
   include if exists <local/child-open>
 }

apparmor.d/groups/gnome/gnome-software

@@ -39,7 +39,8 @@ profile gnome-software @{exec_path} {
   @{bin}/gpg{,2}             rCx -> gpg,
   @{bin}/gpgconf             rCx -> gpg,
   @{bin}/gpgsm               rCx -> gpg,
-  @{lib}/gio-launch-desktop  rPx -> child-open,
+  @{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop  rPx -> child-open,
+  @{lib}/gio-launch-desktop                           rPx -> child-open,
   @{lib}/revokefs-fuse       rix,
 
   /usr/share/app-info/{,**} r,

apparmor.d/groups/gnome/nautilus

@@ -47,7 +47,9 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   @{bin}/firejail           rPUx,
   @{bin}/net                rPUx,
   @{bin}/tracker3           rPUx,
-  @{lib}/gio-launch-desktop  rPx -> child-open,
+
+  @{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop  rPx -> child-open,
+  @{lib}/gio-launch-desktop                           rPx -> child-open,
 
   /usr/share/*ubuntu/applications/{,**} r,
   /usr/share/icu/@{int}.@{int}/*.dat r,

apparmor.d/groups/ubuntu/ubuntu-advantage

@@ -38,7 +38,7 @@ profile ubuntu-advantage @{exec_path} {
   @{bin}/apt-get                        rPx,
   @{bin}/dpkg                           rPx -> child-dpkg,
   @{bin}/ps                             rPx,
-  @{bin}/snap                           rPx,
+  @{bin}/snap                          rPUx,
   @{bin}/systemctl                      rCx ->  systemctl,
   @{bin}/systemd-detect-virt            rPx,
   @{bin}/ubuntu-distro-info             rPx,