feat(profiles): general update.

apparmor.d/profiles-s-z/sgdisk

@@ -12,13 +12,6 @@ profile sgdisk @{exec_path} {
   include <abstractions/base>
   include <abstractions/disks-write>
 
-  # Needed to inform the system of newly created/removed partitions
-  #  ioctl(3, BLKRRPART)              = -1 EACCES (Permission denied)
-  #
-  #  Warning: The kernel is still using the old partition table.
-  #  The new table will be used at the next reboot or after you
-  #  run partprobe(8) or kpartx(8)
-  #  The operation has completed successfully.
   capability sys_admin,
 
   @{exec_path} mr,

apparmor.d/profiles-s-z/udisksd

@@ -98,9 +98,10 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
   /{usr/,}{s,}bin/mkfs.btrfs       rPx,
   /{usr/,}{s,}bin/mkfs.ext{2,3,4}  rPx,
   /{usr/,}{s,}bin/mkfs.fat         rPx,
+  /{usr/,}{s,}bin/sfdisk           rPx,
+  /{usr/,}{s,}bin/sgdisk           rPx,
   /{usr/,}bin/eject                rPx,
   /{usr/,}bin/ntfs-3g              rPx,
-  /{usr/,}{s,}bin/sfdisk           rPx,
   /{usr/,}bin/ntfsfix              rPx,
   /{usr/,}bin/systemctl            rPx -> child-systemctl,
   /{usr/,}bin/systemd-escape       rPx,