add default path for plain use

firewall-applet: update profile

Update firewall-applet profile for support:

- Access to user config file (full access and lock)
- Access to cgroup info for pid process (read-only)

apparmor.d/groups/firewall/firewall-applet

@@ -21,6 +21,9 @@ profile firewall-applet @{exec_path} flags=(attach_disconnected) {
 
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/mounts r,
+  owner @{PROC}/@{pid}/cgroup r,
+
+  owner @{user_config_dirs}/firewall/applet.conf rw,
 
   include if exists <local/firewall-applet>
 }

apparmor.d/profiles-g-l/grim

@@ -13,6 +13,10 @@ profile grim @{exec_path} {
 
   @{exec_path} mr,
 
+  owner @{user_config_dirs}/user-dirs.dirs r,
+
+  owner @{HOME}/@{int8}_**_grim.png w,
+
   owner /dev/shm/grim-@{rand6} rw,
 
   include if exists <local/grim>