fix: newly detected linter issues.

apparmor.d/abstractions/common/app

@@ -56,11 +56,11 @@
   owner @{HOME}/.var/app/** rmix,
   owner @{HOME}/** rwmlk -> @{HOME}/**,
   owner @{run}/user/@{uid}/ r,
-  owner @{run}/user/@{uid}/** rwlk -> @{run}/user/@{uid}/**,
+  owner @{run}/user/@{uid}/** rwlk -> @{run}/user/@{uid}/**,  #aa:lint ignore
   owner @{user_games_dirs}/** rmix,
 
-  owner @{tmp}/** rmwk,
-  owner /dev/shm/** rwlk -> /dev/shm/**,
+  owner @{tmp}/** rmwk,  #aa:lint ignore
+  owner /dev/shm/** rwlk -> /dev/shm/**,  #aa:lint ignore
   owner /var/cache/tmp/** rwlk -> /var/cache/tmp/**,
   owner /var/tmp/etilqs_@{sqlhex} rw,
 

apparmor.d/groups/browsers/epiphany

@@ -51,7 +51,6 @@ profile epiphany @{exec_path} flags=(attach_disconnected) {
   owner @{tmp}/WebKit-Media-@{rand6} rw,
 
   @{sys}/devices/virtual/dmi/id/chassis_type r,
-  @{sys}/firmware/acpi/pm_profile r,
   @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/app.slice/app-gnome-org.gnome.Epiphany-@{int}.scope/memory.* r,
 
         @{PROC}/@{pid}/cgroup r,

apparmor.d/groups/gpg/scdaemon

@@ -25,7 +25,7 @@ profile scdaemon @{exec_path} {
   owner /etc/pacman.d/gnupg/S.scdaemon rw,
 
   owner @{HOME}/@{XDG_GPG_DIR}/scdaemon.conf r,
-  owner @{HOME}/@{XDG_GPG_DIR}common.conf r,
+  owner @{HOME}/@{XDG_GPG_DIR}/common.conf r,
   owner @{HOME}/@{XDG_GPG_DIR}/reader_@{int}.status rw,
 
   owner @{run}/user/@{uid}/gnupg/S.scdaemon rw,

apparmor.d/profiles-a-f/adequate

@@ -54,14 +54,12 @@ profile adequate @{exec_path} flags=(complain) {
 
     @{bin}/*               mr,
     /usr/games/*           mr,
-    @{lib}{,x}/**  mr,
     @{lib}/@{multiarch}/** mr,
     /usr/share/**                r,
 
     /opt/google/chrome{,-beta,-unstable}/google-chrome{,-beta,-unstable} mr,
 
     @{lib}/@{multiarch}/ld-*.so rix,
-    @{lib}{,x}32/ld-*.so        rix,
 
     include if exists <local/adequate_ldd>
   }

apparmor.d/profiles-g-l/kernel-install

@@ -42,7 +42,10 @@ profile kernel-install @{exec_path} {
 
   @{lib}/modules/*/modules.* w,
 
+  / r,
+
   @{efi}/@{hex32}/** rw,
+  @{efi}/loader/entries.srel r,
 
   owner /boot/{vmlinuz,initrd.img}-* r,
   owner /boot/[a-f0-9]*/*/ rw,