Replace shells with new sh_path variable

Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>

apparmor.d/groups/grub/grub-check-signatures

@@ -13,7 +13,7 @@ profile grub-check-signatures @{exec_path} {
 
   @{exec_path} mr,
 
-  @{bin}/{,ba,da}sh   rix,
+  @{sh_path}          rix,
   @{bin}/{m,g,}awk    rix,
   @{bin}//mktemp      rix,
   @{bin}//od          rix,

apparmor.d/groups/grub/grub-install

@@ -18,7 +18,7 @@ profile grub-install @{exec_path} flags=(complain) {
 
   @{exec_path} mr,
 
-  @{bin}/{,ba,da}sh        rix,
+  @{sh_path}               rix,
   @{bin}/efibootmgr        rix,
   @{bin}/kmod              rPx,
   @{bin}/lsb_release       rPx -> lsb_release,

apparmor.d/groups/grub/grub-mkconfig

@@ -21,7 +21,7 @@ profile grub-mkconfig @{exec_path} flags=(attach_disconnected) {
   /{usr/,}{local/,}{s,}bin/zpool   rPx,
   @{bin}/dmsetup             rPUx,
   @{bin}/grub-probe           rPx,
-  @{bin}/{,ba,da}sh           rix,
+  @{sh_path}                  rix,
   @{bin}/{e,f,}grep           rix,
   @{bin}/{m,g,}awk            rix,
   @{bin}/basename             rix,

apparmor.d/groups/grub/grub-multi-install

@@ -14,7 +14,7 @@ profile grub-multi-install @{exec_path} {
   @{exec_path} mr,
 
   @{bin}/grub-install       rPx,
-  @{bin}/{,ba,da}sh         rix,
+  @{sh_path}                rix,
   @{bin}/{,e}grep           rix,
   @{bin}/cat                rix,
   @{bin}/cut                rix,

apparmor.d/groups/grub/update-grub

@@ -14,7 +14,7 @@ profile update-grub @{exec_path} {
   capability dac_read_search,
 
   @{exec_path} mr,
-  @{bin}/{,ba,da}sh rix,
+  @{sh_path}        rix,
   @{bin}/grub-mkconfig rPx,
 
   /dev/tty@{int} rw,