feat(profiles): general update.

apparmor.d/groups/freedesktop/polkitd

@@ -22,8 +22,8 @@ profile polkitd @{exec_path} {
 
   ptrace (read),
 
-  dbus (send,receive) bus=system path=/org/freedesktop/PolicyKit[0-9]/*
-       interface=org.freedesktop.{DBus.Introspectable,DBus.Properties,PolicyKit[0-9].*}, # all members
+  dbus (send,receive) bus=system path=/org/freedesktop/PolicyKit1/*
+       interface=org.freedesktop.{DBus.Introspectable,DBus.Properties,PolicyKit1.*}, # all members
 
   dbus (send) bus=system path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus
@@ -31,7 +31,7 @@ profile polkitd @{exec_path} {
        peer=(name=org.freedesktop.DBus),
 
   dbus (bind) bus=system
-       name=org.freedesktop.PolicyKit[0-9],
+       name=org.freedesktop.PolicyKit1,
 
   @{exec_path} mr,
 

apparmor.d/groups/freedesktop/xdg-desktop-portal

@@ -49,6 +49,7 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
 
   # Allowed apps to open
   /{usr/,}bin/firefox rPx -> firefox,
+  /{usr/,}bin/nautilus rPx,
 
   / r,
   /.flatpak-info r,

apparmor.d/groups/freedesktop/xdg-email

@@ -14,8 +14,10 @@ profile xdg-email @{exec_path} flags=(complain) {
   @{exec_path}  r,
 
   /{usr/,}bin/{,ba,da}sh  rix,
-  /{usr/,}bin/gio         rPx,
   /{usr/,}bin/{,e}grep    rix,
+  /{usr/,}bin/basename    rix,
+  /{usr/,}bin/gio         rPx,
+  /{usr/,}bin/readlink    rix,
   /{usr/,}bin/sed         rix,
   /{usr/,}bin/which       rix,
   /{usr/,}bin/xdg-mime    rPx,

apparmor.d/groups/freedesktop/xdg-user-dirs-gtk-update

@@ -13,6 +13,7 @@ profile xdg-user-dirs-gtk-update @{exec_path} {
 
   @{exec_path} mr,
 
+  owner @{user_config_dirs}/gtk-3.0/bookmarks* rw,
   owner @{user_config_dirs}/user-dirs.dirs r,
   owner @{user_config_dirs}/user-dirs.locale r,