feat(profile): general update.

See:  #102

apparmor.d/profiles-a-f/btrfs

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2019-2021 Mikhail Morfikov
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -18,21 +19,12 @@ profile btrfs @{exec_path} {
 
   @{exec_path} mr,
 
-  @{run}/blkid/blkid.tab{,-*} rw,
-  @{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
-
-  owner @{PROC}/@{pid}/mounts r,
-        @{PROC}/partitions r,
-
-  # For fsck of the btrfs filesystem directly from gparted
-  owner /tmp/gparted-*/ rw,
-
-  # For scrub
   /var/lib/btrfs/ rw,
   /var/lib/btrfs/scrub.progress.@{uuid} rw,
   /var/lib/btrfs/scrub.status.@{uuid}{,_tmp} rwk,
 
-  # Saved metadata
+  / r,
+  /boot/ r,
   @{MOUNTS}/ r,
   @{MOUNTS}/ext2_saved/ rw,
   @{MOUNTS}/ext2_saved/image rw,
@@ -46,6 +38,15 @@ profile btrfs @{exec_path} {
   owner @{HOME}/**.{ISO,IMG,BIN,MDF,NRG} rwk,
   owner @{MOUNTS}/**.{ISO,IMG,BIN,MDF,NRG} rwk,
 
+  # For fsck of the btrfs filesystem directly from gparted
+  owner /tmp/gparted-*/ rw,
+
+  @{run}/blkid/blkid.tab{,-*} rw,
+  @{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
+
+        @{PROC}/partitions r,
+  owner @{PROC}/@{pid}/mounts r,
+
   /dev/btrfs-control rw,
 
   include if exists <local/btrfs>

apparmor.d/profiles-a-f/fwupd

@@ -81,6 +81,7 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
   /var/cache/fwupd/{,**} rw,
   /var/lib/fwupd/{,**} rw,
   /var/lib/fwupd/pending.db rwk,
+  /var/tmp/etilqs_@{hex} rw,
 
   /boot/{,**} r,
   /boot/EFI/*/.goutputstream-* rw,