Merge lp:~intrigeri/apparmor-profiles/totem-3.18.1 into lp:apparmor-profiles

[intrigeri]

This fixes problems reported by Julian Andres Klode on https://bugs.debian.org/808859, and a few other ones I could not ignore anymore once I was at it :)

[intrigeri (intrigeri)]

Ping?

[intrigeri (intrigeri)]

Ping?

[Steve Beattie (sbeattie)]

Looks good, merged after fixing up to apply to the 16.10 tree as well. Thanks, and my apologies for the delay.

review: Approve

=== modified file 'ubuntu/16.04/abstractions/totem'
--- ubuntu/16.04/abstractions/totem	2015-10-27 01:49:53 +0000
+++ ubuntu/16.04/abstractions/totem	2015-12-30 20:25:02 +0000
@@ -28,8 +28,12 @@
   /usr/share/** r,
   /{media,mnt,opt,srv}/** r,
 
-  /usr/lib/@{multiarch}/gstreamer[0-9].[0-9]/gstreamer-[0-9].[0-9]/gst-plugin-scanner Cix -> gst_plugin_scanner,
+  /usr/lib/@{multiarch}/gstreamer[0-9]*.[0-9]*/gstreamer-[0-9]*.[0-9]*/gst-plugin-scanner Cix -> gst_plugin_scanner,
 
   owner @{HOME}/.cache/tracker/meta.db k,
   owner @{HOME}/.cache/tracker/meta.db-shm k,
-  owner @{HOME}/.local/share/grilo-plugins/*.db k,
+  owner @{HOME}/.local/share/grilo-plugins/*.db{,-shm} k,
+
+  owner @{PROC}/@{pid}/status r,
+
+  /sys/devices/system/node/*/meminfo r,
 
=== modified file 'ubuntu/16.04/usr.bin.totem'
--- ubuntu/16.04/usr.bin.totem	2015-11-13 19:05:05 +0000
+++ ubuntu/16.04/usr.bin.totem	2015-12-30 20:25:02 +0000
@@ -13,6 +13,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /usr/bin/totem-video-thumbnailer Pix,
   /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
@@ -23,4 +24,6 @@
   owner /{,var/}run/user/*/dconf/user w,
   owner /{,var/}run/user/*/at-spi2-*/   rw,
   owner /{,var/}run/user/*/at-spi2-*/** rw,
+
+  /sys/devices/pci[0-9]*/**/config r,
 }
 
=== modified file 'ubuntu/16.04/usr.bin.totem-previewers'
--- ubuntu/16.04/usr.bin.totem-previewers	2015-10-27 01:49:53 +0000
+++ ubuntu/16.04/usr.bin.totem-previewers	2015-12-30 20:25:02 +0000
@@ -14,6 +14,8 @@
   # Not needed by nautilus, but maybe other applications
   owner /**.[pP][nN][gG] w,
   owner /**.[jJ][pP]{,[eE]}[gG] w,
+
+  /usr/bin/totem-video-thumbnailer r,
 }
 
 /usr/bin/totem-audio-preview {