polishing

apparmor.d/abstractions/dbus-gtk

@@ -28,7 +28,7 @@
 
   dbus (send, receive) bus=session path=/org/freedesktop/Notifications
        interface=org.freedesktop.Notifications
-       peer=(name=:*),
+       peer=(name="{org.freedesktop.Notifications,:*}"),
 
   dbus (receive) bus=accessibility path=/org/a11y/atspi/registry
        interface=org.a11y.atspi.Registry

apparmor.d/groups/apps/thunderbird

@@ -32,7 +32,7 @@ profile thunderbird @{exec_path} {
   include <abstractions/thumbnails-cache-read>
   include <abstractions/nameservice-strict>
   include <abstractions/openssl>
-  include <abstractions/dconf>
+  include <abstractions/dconf-write>
   include <abstractions/ibus>
   include <abstractions/dbus-strict>
   include <abstractions/dbus-session-strict>
@@ -223,13 +223,6 @@ profile thunderbird @{exec_path} {
   owner /dev/tty[0-9]* rw,
   owner @{HOME}/.xsession-errors w,
 
-  # dconf write
-  owner @{HOME}/.config/dconf/     rw,
-  owner @{HOME}/.config/dconf/user rw,
-  owner @{run}/user/@{uids}/dconf/user rw,
-
-  owner @{run}/user/@{uid}/ICEauthority r,
-
   @{sys}/cgroup/cpu,cpuacct/user.slice/cpu.cfs_quota_us r,
   @{sys}/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,
 

apparmor.d/profiles-m-r/qbittorrent

@@ -22,7 +22,7 @@ profile qbittorrent @{exec_path} {
   include <abstractions/qt5>
   include <abstractions/qt5-compose-cache-write>
   include <abstractions/qt5-settings-write>
-  include <abstractions/dconf>
+  include <abstractions/dconf-write>
   include <abstractions/ibus>
   include <abstractions/dbus-strict>
   include <abstractions/dbus-session-strict>
@@ -46,54 +46,54 @@ profile qbittorrent @{exec_path} {
   network netlink raw,
 
   dbus (send) bus=session path=/StatusNotifierWatcher
-    interface=org.freedesktop.DBus.Introspectable
-    member=Introspect
-    peer=(name=org.kde.StatusNotifierWatcher),
-
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=org.kde.StatusNotifierWatcher),
+   
   dbus (send) bus=session path=/StatusNotifierWatcher
-    interface=org.freedesktop.DBus.Properties
-    member=Get
-    peer=(name=org.kde.StatusNotifierWatcher),
-
+       interface=org.freedesktop.DBus.Properties
+       member=Get
+       peer=(name=org.kde.StatusNotifierWatcher),
+   
   dbus (send) bus=session path=/StatusNotifierWatcher
-    interface=org.kde.StatusNotifierWatcher
-    member=RegisterStatusNotifierItem
-    peer=(name=org.kde.StatusNotifierWatcher),
-
+       interface=org.kde.StatusNotifierWatcher
+       member=RegisterStatusNotifierItem
+       peer=(name=org.kde.StatusNotifierWatcher),
+   
   dbus (send) bus=session path=/StatusNotifierItem
-    interface=org.kde.StatusNotifierItem
-    member={NewToolTip,NewIcon}
-    peer=(name=org.freedesktop.DBus),
-
+       interface=org.kde.StatusNotifierItem
+       member={NewToolTip,NewIcon}
+       peer=(name=org.freedesktop.DBus),
+   
   dbus (receive) bus=session path=/StatusNotifierItem
-    interface=org.kde.StatusNotifierItem
-    member=Activate
-    peer=(name=:*),
-
+       interface=org.kde.StatusNotifierItem
+       member=Activate
+       peer=(name=:*),
+   
   dbus (receive) bus=session path=/StatusNotifierItem
-    interface=org.freedesktop.DBus.Properties
-    member=GetAll
-    peer=(name=:*),
-
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=:*),
+   
   dbus (receive) bus=session path=/MenuBar
-    interface=org.freedesktop.DBus.Properties
-    member=GetAll
-    peer=(name=:*),
-
+       interface=org.freedesktop.DBus.Properties
+       member=GetAll
+       peer=(name=:*),
+   
   dbus (send) bus=session path=/MenuBar
-    interface=com.canonical.dbusmenu
-    member=ItemsPropertiesUpdated
-    peer=(name=org.freedesktop.DBus),
-
+       interface=com.canonical.dbusmenu
+       member=ItemsPropertiesUpdated
+       peer=(name=org.freedesktop.DBus),
+   
   dbus (receive) bus=session path=/MenuBar
-    interface=com.canonical.dbusmenu
-    member={GetLayout,GetGroupProperties,AboutToShow,AboutToShowGroup,EventGroup,Event}
-    peer=(name=:*),
-
+       interface=com.canonical.dbusmenu
+       member={GetLayout,GetGroupProperties,AboutToShow,AboutToShowGroup,EventGroup,Event}
+       peer=(name=:*),
+   
   dbus (send) bus=session path=/org/freedesktop/DBus
-    interface=org.freedesktop.DBus
-    member={RequestName,ReleaseName}
-    peer=(name=org.freedesktop.DBus),
+       interface=org.freedesktop.DBus
+       member={RequestName,ReleaseName}
+       peer=(name=org.freedesktop.DBus),
 
   dbus (send) bus=accessibility path=/org/a11y/atspi/accessible/root
        interface=org.a11y.atspi.Socket
@@ -109,7 +109,6 @@ profile qbittorrent @{exec_path} {
     name=org.kde.StatusNotifierItem-*,
 
   owner /tmp/dbus-[0-9a-zA-Z]* rw,
-  owner @{run}/user/@{uid}/at-spi/bus{,_[0-9]*} rw,
 
   @{exec_path} mr,
 
@@ -172,8 +171,7 @@ profile qbittorrent @{exec_path} {
   # file_inherit
   owner /dev/tty[0-9]* rw,
 
-  # dconf write
-  owner @{run}/user/@{uid}/dconf/user   rw,
+  # X-tiny
   owner @{run}/user/@{uid}/ICEauthority r,
 
   # gnome-tiny