feat(abs): rewrite the app/open abstraction to accomodate kde requirements.

See #630 #605  #647

apparmor.d/groups/children/child-open-any

@@ -13,11 +13,7 @@ include <tunables/global>
 
 profile child-open-any flags=(attach_disconnected,mediate_deleted) {
   include <abstractions/base>
-  include <abstractions/desktop>
-
-  @{open_path} mrix,
-
-  @{sh_path} r,
+  include <abstractions/app/open>
 
   @{bin}/**                     PUx,
   @{lib}/**                     PUx,
@@ -32,10 +28,6 @@ profile child-open-any flags=(attach_disconnected,mediate_deleted) {
   /usr/                         r,
   /usr/local/bin/               r,
 
-  owner @{run}/user/@{uid}/kioclient@{rand6}.@{int}.kioworker.socket rwl -> @{run}/user/@{uid}/#@{int},
-
-  /dev/tty rw,
-
   include if exists <usr/child-open-any.d>
   include if exists <local/child-open-any>
 }