abstractions: dbus session improvement.

- Add full access to unix stream over /tmp/dbus-*
- Add at-spi dbus support

From: https://github.com/roddhjav/apparmor.d

profiles/apparmor.d/abstractions/dbus-session-strict

@@ -15,9 +15,10 @@
   /etc/machine-id r,
   /var/lib/dbus/machine-id r,
 
-  unix (connect, receive, send)
-       type=stream
-       peer=(addr="@/tmp/dbus-*"),
+  unix (connect, receive, send, accept) type=stream peer=(addr="@/tmp/dbus-*"),
+
+  unix (connect, send, receive, accept) type=stream addr="@/tmp/dbus-*",
+  unix (bind, listen) type=stream addr="@/tmp/dbus-*",
 
   # dbus with systemd and --enable-user-session
   owner @{run}/user/[0-9]*/bus rw,
@@ -29,5 +30,10 @@
        member={Hello,AddMatch,RemoveMatch,GetNameOwner,NameHasOwner,StartServiceByName}
        peer=(name=org.freedesktop.DBus),
 
+  owner @{run}/user/@{uid}/at-spi/ rw,
+  owner @{run}/user/@{uid}/at-spi/bus{,_[0-9]*} rw,
+
+  owner /tmp/dbus-[0-9a-zA-Z]* rw,
+
   # Include additions to the abstraction
   include if exists <abstractions/dbus-session-strict.d>