update apparmor profile for git push enabled and .thumb dir