feat(profiles): apply rule from #51.

apparmor.d/profiles-m-r/mount-zfs

@@ -31,5 +31,9 @@ profile mount-zfs @{exec_path} flags=(complain) {
   umount /,
   umount /*/,
 
+  @{PROC}/@{pids}/mounts r,
+
+  /dev/zfs rw,
+
   include if exists <local/mount-zfs>
 }

apparmor.d/profiles-m-r/run-parts

@@ -79,6 +79,7 @@ profile run-parts @{exec_path} {
   /etc/network/if-up.d/ethtool               rPUx,
   /etc/network/if-up.d/ifenslave             rPUx,
   /etc/network/if-up.d/openvpn               rPUx,
+  /etc/network/if-up.d/postfix               rPUx,
   /etc/network/if-up.d/wpasupplicant         rPUx,
 
   # Motd