feat(profiles): general update.

apparmor.d/groups/pacman/aurpublish

@@ -17,6 +17,7 @@ profile aurpublish @{exec_path} {
   /{usr/,}bin/{,ba,da}sh  rix,
   /{usr/,}bin/cat         rix,
   /{usr/,}bin/chmod       rix,
+  /{usr/,}bin/curl        rix,
   /{usr/,}bin/date        rix,
   /{usr/,}bin/gettext     rix,
   /{usr/,}bin/git         rPx,
@@ -25,6 +26,7 @@ profile aurpublish @{exec_path} {
   /{usr/,}bin/makepkg     rix,
   /{usr/,}bin/mkdir       rix,
   /{usr/,}bin/mktemp      rix,
+  /{usr/,}bin/mv          rix,
   /{usr/,}bin/nproc       rix,
   /{usr/,}bin/rm          rix,
   /{usr/,}bin/sha512sum   rix,

apparmor.d/groups/pacman/mkinitcpio

@@ -35,7 +35,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/gzip                rix,
   /{usr/,}bin/hexdump             rix,
   /{usr/,}bin/install             rix,
-  /{usr/,}bin/ldconfig            rix,
+  /{usr/,}{s,}bin/ldconfig        rix,
   /{usr/,}bin/ldd                 rix,
   /{usr/,}bin/ln                  rix,
   /{usr/,}bin/loadkeys            rix,
@@ -94,14 +94,14 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
   /boot/initramfs-*.img* rw,
   /boot/vmlinuz-* r,
 
-  @{sys}/class/block/ r,
-  @{sys}/devices/{,**} r,
-
   # Temp files
   owner @{run}/initramfs/{,**} rw,
   owner @{run}/mkinitcpio.*/{,**} rw,
   owner /tmp/mkinitcpio.*/{,**} rw,
 
+  @{sys}/class/block/ r,
+  @{sys}/devices/{,**} r,
+
   owner @{PROC}/@{pid}/mountinfo r,
 
   # Inherit silencer

apparmor.d/groups/pacman/pacman-hook-mkinitcpio

@@ -24,6 +24,7 @@ profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) {
   /{usr/,}bin/install    rix,
   /{usr/,}bin/mkinitcpio rPx,
   /{usr/,}bin/mv         rix,
+  /{usr/,}bin/od         rix,
   /{usr/,}bin/rm         rix,
   /{usr/,}bin/sed        rix,