feat(profiles): add the X-strict abstraction.

apparmor.d/abstractions/X-strict

@@ -0,0 +1,30 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+  # The unix socket to use to connect to the display
+  unix (connect, receive, send)
+       type=stream
+       peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
+  unix (connect, receive, send)
+       type=stream
+       peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
+  /tmp/.X11-unix/* rw,
+
+  # Available Xsessions
+  /usr/share/xsessions/{,*.desktop} r,
+
+  # ICEauthority files required for X authentication, per user
+  owner @{HOME}/.ICEauthority r,
+  owner @{run}/user/@{uid}/ICEauthority r,
+
+  # Xauthority files required for X connections, per user
+  owner @{HOME}/.Xauthority r,
+  owner @{run}/user/@{uid}/gdm{[1-9],}/Xauthority r,
+  owner @{run}/user/@{uid}/X11/Xauthority r,
+  owner @{run}/user/@{uid}/xauth_* r,
+
+  # Xwayland
+  owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
+
+  include if exists <abstractions/X-strict.d>