AppArmor profile exchange

#include <tunables/global>
/usr/bin/xfs {
  #include <abstractions/base>

  capability setgid,
  capability setuid,

  network inet,
  network inet6,

  /etc/X11/fontpath.d rk,
  /etc/X11/fontpath.d/ rk,
  /etc/X11/fontpath.d/** r,
  /etc/X11/fs/config r,
  /etc/group r,
  /etc/ld.so.preload r,
  /etc/nsswitch.conf r,
  /etc/passwd r,
  /etc/services r,
  /home/*/.fontconfig r,
  /home/*/.fonts/** r,
  /tmp/ rw,
  /tmp/.font-unix rwlk,
  /tmp/.font-unix/ rwlk,
  /tmp/.font-unix/** rwlk,
  /usr/bin/xfs mr,
  /usr/share/fonts/** r,
  /usr/share/lilypond/2.11.40/fonts/** r,
  /var/db/nscd/group r,
  /var/db/nscd/passwd r,
  /var/db/nscd/services r,
  /var/fonts2/** r,
  /var/run/dbus/system_bus_socket rw,
  /var/run/nscd/services r,
  /var/run/nscd/socket rw,
  /var/run/xfs.pid rwl,
}