feat(profiles): general update.

apparmor.d/groups/systemd/bootctl

@@ -65,6 +65,7 @@ profile bootctl @{exec_path} {
   @{sys}/firmware/efi/efivars/OsIndicationsSupported-@{uuid} r,
   @{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
   @{sys}/firmware/efi/efivars/SetupMode-@{uuid} r,
+  @{sys}/firmware/efi/fw_platform_size r,
 
  owner @{PROC}/@{pid}/cgroup r,
        @{PROC}/sys/kernel/random/poolsize r,

apparmor.d/groups/systemd/systemd-tmpfiles

@@ -37,7 +37,7 @@ profile systemd-tmpfiles @{exec_path} flags=(attach_disconnected) {
   # Where the tmpfiles can be created,
   /{,*} rw,
   /dev/{,**} rw,
-  /etc/{,**} r,
+  /etc/{,**} rw,
   /home/ rw,
   /opt/{,**} rw,
   /run/{,**} rw,