feat(profiles): apply rule from #51.

apparmor.d/profiles-s-z/sudo

@@ -13,6 +13,7 @@ profile sudo @{exec_path} {
   include <abstractions/app-launcher-root>
   include <abstractions/authentication>
   include <abstractions/consoles>
+  include <abstractions/dbus-strict>
   include <abstractions/nameservice-strict>
   include <abstractions/wutmp>
 # include <pam/mappings>
@@ -32,9 +33,13 @@ profile sudo @{exec_path} {
 
   ptrace (read),
 
-  # signal,
   signal (send) set=(cont,hup) peer=su,
 
+  dbus send bus=system path=/org/freedesktop/login[0-9]
+       interface=org.freedesktop.login[0-9].Manager
+       member=CreateSession
+       peer=(name=org.freedesktop.login[0-9]),
+
   @{exec_path} mr,
 
   /run/ r,