Small fixes.

apparmor.d/groups/browsers/firefox

@@ -190,6 +190,7 @@ profile firefox @{exec_path} {
 
   # file_inherit
   owner /dev/tty[0-9]* rw,
+  /dev/dri/card[0-9]* rw,
 
   /etc/opensc.conf r,
 

apparmor.d/groups/desktop/xwayland

@@ -15,6 +15,7 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
   include <abstractions/nameservice-strict>
 
   signal (receive) set=(term hup) peer=gdm*,
+  signal (receive) set=(term hup) peer=gnome-shell,
 
   @{exec_path} mrix,
 

apparmor.d/profiles-a-l/fsck

@@ -11,6 +11,9 @@ profile fsck @{exec_path} {
   include <abstractions/base>
   include <abstractions/disks-read>
 
+  capability dac_override,
+  capability dac_read_search,
+
   @{exec_path} mr,
 
   /{usr/,}{s,}bin/e2fsck rPx,

apparmor.d/profiles-m-z/openbox

@@ -64,12 +64,8 @@ profile openbox @{exec_path} {
     # Apps allowed to run
     /{usr/,}sbin/*                     rPUx,
     /{usr/,}bin/*                      rPUx,
-<<<<<<< HEAD:apparmor.d/profiles-m-z/openbox
-    /usr/{lib,libexec}/*               rPUx,
-=======
     /usr/local/bin/*                   rPUx,
-    /usr/libexec/*                     rPUx,
+    /usr/{lib,libexec}/*               rPUx,
->>>>>>> ff78b17 (update apparmor profiles):apparmor.d/openbox
     /{usr/,}lib/@{multiarch}/*/**      rPUx,
 
     /usr/local/lib/python*/dist-packages/ r,

apparmor.d/profiles-m-z/virt-manager

@@ -62,6 +62,7 @@ profile virt-manager @{exec_path} {
   #owner /var/lib/libvirt/images/ r,
 
   # User VM images
+  owner @{user_share_dirs}/ r,
   owner @{user_share_dirs}/libvirt/{,**} rw,
   owner @{HOME}/@{XDG_VM_DIR}/{,**} rw,
   owner @{MOUNTS}/*/@{XDG_VM_DIR}/{,**} rw,