feat(profile): general update.

apparmor.d/groups/pacman/makepkg

@@ -10,6 +10,12 @@ include <tunables/global>
 profile makepkg @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
+  include <abstractions/nameservice-strict>
+  include <abstractions/perl>
+  include <abstractions/python>
+  include <abstractions/shells>
+  include <abstractions/ssl_certs>
+  include <abstractions/wutmp>
 
   network inet stream,
   network inet6 stream,

apparmor.d/groups/pacman/pacman-hook-systemd

@@ -15,13 +15,14 @@ profile pacman-hook-systemd @{exec_path} {
 
   @{exec_path} mr,
 
-  @{bin}/bash  rix,
+  @{sh_path}   rix,
   @{bin}/touch rix,
 
   @{bin}/journalctl             rPx,
   @{bin}/systemctl              rCx -> systemctl,
   @{bin}/systemd-detect-virt    rPx,
   @{bin}/systemd-hwdb           rPx,
+  @{bin}/systemd-notify         rPx,
   @{bin}/systemd-sysusers       rPx,
   @{bin}/systemd-tmpfiles       rPx,
   @{bin}/udevadm                rPx,

apparmor.d/groups/pacman/yay

@@ -55,6 +55,10 @@ profile yay @{exec_path} {
 
     /usr/share/git{,-core}/{,**} r,
 
+    owner @{user_build_dirs}/**/.git/** r,
+    owner @{user_pkg_dirs}/**/.git/** r,
+    owner @{user_projects_dirs}/**/.git/** r,
+
     owner @{HOME}/.gitconfig r,
     owner @{user_cache_dirs}/yay/ rw,
     owner @{user_cache_dirs}/yay/** rwlk -> @{user_cache_dirs}/yay/**,