feat(profiles): minor kde additions.

apparmor.d/groups/akonadi/akonadi_indexing_agent

@@ -21,6 +21,8 @@ profile akonadi_indexing_agent @{exec_path} {
 
   @{exec_path} mr,
 
+  @{bin}/akonadi_html_to_text rix,
+
   /usr/share/akonadi/plugins/serializer/ r,
   /usr/share/akonadi/plugins/serializer/*.desktop r,
   /usr/share/hwdata/*.ids r,

apparmor.d/groups/kde/plasma-browser-integration-host

@@ -25,6 +25,10 @@ profile plasma-browser-integration-host @{exec_path} {
   @{exec_path} mr,
 
   /usr/share/kservices5/{,**} r,
+  /usr/share/mime/ r,
+
+  /etc/xdg/menus/ r,
+  /etc/xdg/taskmanagerrulesrc r,
 
   owner @{user_cache_dirs}/ksycoca5_* r,
   owner @{user_cache_dirs}/icon-cache.kcache rw,

apparmor.d/groups/kde/sddm

@@ -36,8 +36,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
 
   network netlink raw,
 
-  ptrace (read) peer=kwalletd5,
-  ptrace (read) peer=unconfined,
+  ptrace (read),
   ptrace (trace) peer=@{profile_name},
 
   signal (send) set=term peer=kwin_wayland,
@@ -140,10 +139,10 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   owner @{user_share_dirs}/sddm/xorg-session.log w,
 
         /tmp/sddm-* rw,
+        /tmp/xauth_@{rand6} rwl -> /tmp/#@{int},
   owner /tmp/*/{,s} rw,
   owner /tmp/#@{int} rw,
   owner /tmp/sddm-auth* rw,
-  owner /tmp/xauth_@{rand6} rwl -> /tmp/#@{int},
 
         @{run}/faillock/[a-zA-z0-9]* rwk,
         @{run}/sddm.pid rw,

apparmor.d/groups/kde/startplasma

@@ -41,7 +41,7 @@ profile startplasma @{exec_path} {
   owner @{user_cache_dirs}/ rw,
   owner @{user_cache_dirs}/#@{int} rw,
   owner @{user_cache_dirs}/kcrash-metadata/ rw,
-  owner @{user_cache_dirs}/ksycoca5_* rwkl -> @{user_cache_dirs}/#@{int},
+        @{user_cache_dirs}/ksycoca5_* rwkl -> @{user_cache_dirs}/#@{int},
   owner @{user_cache_dirs}/plasma-svgelements rw,
 
   owner @{user_config_dirs}/#@{int} rw,