feat(profiles): general update.

apparmor.d/groups/ubuntu/check-new-release-gtk

@@ -12,6 +12,7 @@ profile check-new-release-gtk @{exec_path} {
   include <abstractions/apt-common>
   include <abstractions/dbus-session-strict>
   include <abstractions/dconf-write>
+  include <abstractions/fonts>
   include <abstractions/gtk>
   include <abstractions/nameservice-strict>
   include <abstractions/openssl>

apparmor.d/groups/ubuntu/livepatch-notification

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/update-notifier/livepatch-notification
 profile livepatch-notification @{exec_path} {
   include <abstractions/base>
+  include <abstractions/dbus-session-strict>
   include <abstractions/dconf-write>
   include <abstractions/gtk>
 

apparmor.d/groups/ubuntu/software-properties-dbus

@@ -42,6 +42,7 @@ profile software-properties-dbus @{exec_path} {
   /usr/share/xml/iso-codes/{,**} r,
 
   owner /tmp/[a-z0-9]* rw,
+  owner /tmp/_[a-z0-9]* rw,
   owner /tmp/tmp*/{,apt.conf} rw,
 
   owner @{PROC}/@{pid}/fd/ r,

apparmor.d/groups/ubuntu/update-notifier

@@ -11,6 +11,7 @@ profile update-notifier @{exec_path} {
   include <abstractions/base>
   include <abstractions/apt-common>
   include <abstractions/audio>
+  include <abstractions/dbus-session-strict>
   include <abstractions/dconf-write>
   include <abstractions/fonts>
   include <abstractions/gtk>
@@ -18,6 +19,9 @@ profile update-notifier @{exec_path} {
   include <abstractions/openssl>
   include <abstractions/python>
 
+  dbus receive bus=session path=/org/ayatana/NotificationItem/*
+       member={GetLayout,GetGroupProperties,GetAll,AboutToShow},
+
   @{exec_path} mr,
 
   /{usr/,}bin/{,ba,da}sh                              rix,