feat(profile): cleanup mount dir access.

see #412

apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome

@@ -72,6 +72,7 @@ profile xdg-desktop-portal-gnome @{exec_path} flags=(attach_disconnected) {
 
   owner @{HOME}/ r,
   owner @{HOME}/*/{,**} rw,
+  owner @{MOUNTS}/ r,
 
   owner @{tmp}/.goutputstream-@{rand6} rw,
   owner @{tmp}/@{rand6} rw,

apparmor.d/groups/freedesktop/xdg-document-portal

@@ -42,7 +42,9 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
   / r,
   owner /.flatpak-info r,
 
-  owner @{HOME}/** r,
+  owner @{HOME}/ r,
+  owner @{HOME}/*/{,**} rw,
+  owner @{MOUNTS}/ r,
 
   owner @{user_share_dirs}/flatpak/db/documents r,
   owner @{user_share_dirs}/Trash/files/** r,
@@ -54,8 +56,8 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/cgroup r,
   owner @{PROC}/@{pid}/fd/ r,
 
-          /dev/fuse rw,
-    owner /dev/tty@{int} rw,
+        /dev/fuse rw,
+  owner /dev/tty@{int} rw,
 
   profile fusermount {
     include <abstractions/base>

apparmor.d/profiles-s-z/totem

@@ -35,6 +35,9 @@ profile totem @{exec_path} flags=(attach_disconnected) {
   /usr/share/grilo-plugins/{,**} r,
   /usr/share/thumbnailers/{,**} r,
 
+  owner @{HOME}/ r,
+  owner @{MOUNTS}/ r,
+
   owner @{user_music_dirs}/{,**} rw,
   owner @{user_pictures_dirs}/{,**} rw,
   owner @{user_torrents_dirs}/{,**} rw,
@@ -50,6 +53,8 @@ profile totem @{exec_path} flags=(attach_disconnected) {
   owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=**/ r,
   owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=** r,
 
+  @{run}/mount/utab r,
+
   owner @{PROC}/@{pid}/mountinfo r,
   owner @{PROC}/@{pid}/task/@{tid}/comm w,
 

apparmor.d/profiles-s-z/vlc

@@ -41,6 +41,7 @@ profile vlc @{exec_path} {
 
   @{exec_path} mrix,
 
+  @{open_path}           rPx -> child-open-help,
   @{bin}/xdg-screensaver rPx,
 
   /usr/share/vlc/{,**} r,
@@ -48,6 +49,8 @@ profile vlc @{exec_path} {
   /etc/fstab r,
 
   owner @{HOME}/ r,
+  owner @{MOUNTS}/ r,
+
   owner @{user_music_dirs}/{,**} rw,
   owner @{user_pictures_dirs}/{,**} rw,
   owner @{user_torrents_dirs}/{,**} rw,