feat(profiles): general update.

apparmor.d/profiles-g-l/git

@@ -67,6 +67,7 @@ profile git @{exec_path} {
   /{usr/,}bin/man         rPx,
   /{usr/,}bin/meld       rPUx,
   /{usr/,}lib/code/extensions/git/dist/askpass.sh rPx,
+  /{usr/,}lib/code/extensions/git/dist/git-editor.sh rPx,
   /usr/share/aurpublish/*.hook rPx,
 
   /{usr/,}bin/gpg             rCx -> gpg,

apparmor.d/profiles-g-l/glxinfo

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -14,10 +15,10 @@ profile glxinfo @{exec_path} {
   include <abstractions/mesa>
   include <abstractions/nameservice-strict>
   include <abstractions/opencl>
+  include <abstractions/vulkan>
 
   capability sys_admin,
-  # Needed?
-  deny capability sys_nice,
+  audit capability sys_nice,
 
   @{exec_path} mr,
 

apparmor.d/profiles-g-l/gtk-update-icon-cache

@@ -1,6 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2018-2021 Mikhail Morfikov
-#               2021 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -22,6 +22,10 @@ profile gtk-update-icon-cache @{exec_path} flags=(attach_disconnected) {
   /var/lib/flatpak/exports/share/icons/hicolor/.icon-theme.cache rw,
   /var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache w,
 
+  owner @{user_share_dirs}/** r,
+  owner @{user_share_dirs}/**/.icon-theme.cache rw,
+  owner @{user_share_dirs}/**/icon-theme.cache rw,
+
   deny /apparmor/.null rw,
 
   include if exists <local/gtk-update-icon-cache>

apparmor.d/profiles-g-l/lspci

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = /{usr/,}bin/lspci
-profile lspci @{exec_path} {
+profile lspci @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>