feat(profile): general update.

apparmor.d/abstractions/app/editor

@@ -4,6 +4,7 @@
 # SPDX-License-Identifier: GPL-2.0-only
 
   include <abstractions/nameservice-strict>
+  include <abstractions/consoles>
 
   @{sh_path}                   rix,
   @{bin}/nvim                 mrix,

apparmor.d/abstractions/app/pgrep

@@ -2,7 +2,7 @@
 # Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
-# Minimal set of rules for pgrep.
+# Minimal set of rules for pgrep/pkill.
 
   include <abstractions/consoles>
 

apparmor.d/abstractions/freedesktop.org.d/complete

@@ -13,6 +13,8 @@
   @{system_share_dirs}/ r,
   @{system_share_dirs}/mime/ r,
 
+  /opt/*/**.{desktop,png} r,
+
   /etc/gnome/defaults.list r,
   /etc/xfce4/defaults.list r,  
 

apparmor.d/groups/gnome/gnome-shell

@@ -195,7 +195,6 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   /usr/share/gnome-shell/extensions/*/**               rPUx,
 
   /opt/**/share/icons/{,**} r,
-  /opt/*/**/*.png r,
   /snap/*/@{uid}/**.png r,
   /usr/share/{,zoneinfo-}icu/{,**} r,
   /usr/share/**.{png,jpg,svg} r,

apparmor.d/profiles-a-f/aa-enforce

@@ -6,7 +6,7 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{bin}/aa-enforce @{bin}/aa-complain
+@{exec_path} = @{bin}/aa-enforce @{bin}/aa-complain @{bin}/aa-audit
 profile aa-enforce @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>