feat(groups/{c,d,f,s}*): vim syntax support

Add vim modeline instructing the editor to use syntax plugin provided by apparmor.
Continuation of #392 to keep the diff list relatively short.

apparmor.d/groups/systemd/bootctl

@@ -77,4 +77,6 @@ profile bootctl @{exec_path} {
   deny network inet stream,
 
   include if exists <local/bootctl>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/busctl

@@ -49,4 +49,6 @@ profile busctl @{exec_path} {
   owner @{PROC}/@{pid}/sessionid r,
 
   include if exists <local/busctl>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/coredumpctl

@@ -74,3 +74,5 @@ profile coredumpctl @{exec_path} flags=(complain) {
 
   include if exists <local/coredumpctl>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/hostnamectl

@@ -23,4 +23,6 @@ profile hostnamectl @{exec_path} {
   @{PROC}/sys/kernel/random/boot_id r,
 
   include if exists <local/hostnamectl>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/journalctl

@@ -59,3 +59,5 @@ profile journalctl @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-journalctl>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/localectl

@@ -22,4 +22,6 @@ profile localectl @{exec_path} {
   /usr/share/kbd/keymaps/{,**} r,
 
   include if exists <local/localectl>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/loginctl

@@ -25,3 +25,5 @@ profile loginctl @{exec_path} {
 
   include if exists <local/loginctl>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/networkctl

@@ -67,3 +67,5 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/networkctl>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-ac-power

@@ -22,3 +22,5 @@ profile systemd-ac-power @{exec_path} {
 
   include if exists <local/systemd-ac-power>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-analyze

@@ -69,3 +69,5 @@ profile systemd-analyze @{exec_path} {
 
   include if exists <local/systemd-analyze>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-ask-password

@@ -17,3 +17,5 @@ profile systemd-ask-password @{exec_path} {
 
   include if exists <local/systemd-ask-password>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-backlight

@@ -44,3 +44,5 @@ profile systemd-backlight @{exec_path} {
 
   include if exists <local/systemd-backlight>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-binfmt

@@ -30,3 +30,5 @@ profile systemd-binfmt @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-binfmt>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-cat

@@ -19,3 +19,5 @@ profile systemd-cat @{exec_path} {
 
   include if exists <local/systemd-cat>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-cgls

@@ -26,3 +26,5 @@ profile systemd-cgls @{exec_path} {
 
   include if exists <local/systemd-cgls>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-cgtop

@@ -24,3 +24,5 @@ profile systemd-cgtop @{exec_path} {
 
   include if exists <local/systemd-cgtop>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-coredump

@@ -54,3 +54,5 @@ profile systemd-coredump @{exec_path} flags=(attach_disconnected,mediate_deleted
 
   include if exists <local/systemd-coredump>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-cryptsetup

@@ -36,4 +36,6 @@ profile systemd-cryptsetup @{exec_path} {
   /dev/loop-control r,  #aa:only whonix
 
   include if exists <local/systemd-cryptsetup>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-delta

@@ -31,3 +31,5 @@ profile systemd-delta @{exec_path} {
 
   include if exists <local/systemd-delta>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-detect-virt

@@ -32,3 +32,5 @@ profile systemd-detect-virt @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-detect-virt>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-dissect

@@ -48,3 +48,5 @@ profile systemd-dissect @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-dissect>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-escape

@@ -15,3 +15,5 @@ profile systemd-escape @{exec_path} {
 
   include if exists <local/systemd-escape>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-fsck

@@ -28,3 +28,5 @@ profile systemd-fsck @{exec_path} {
 
   include if exists <local/systemd-fsck>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-fsckd

@@ -22,3 +22,5 @@ profile systemd-fsckd @{exec_path} {
 
   include if exists <local/systemd-fsckd>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-bless-boot

@@ -16,4 +16,6 @@ profile systemd-generator-bless-boot @{exec_path} flags=(attach_disconnected) {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-bless-boot>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-cloud-init

@@ -26,4 +26,6 @@ profile systemd-generator-cloud-init @{exec_path} flags=(attach_disconnected) {
   @{PROC}/cmdline r,
 
   include if exists <local/systemd-generator-cloud-init>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-cryptsetup

@@ -21,4 +21,6 @@ profile systemd-generator-cryptsetup @{exec_path} flags=(attach_disconnected) {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-cryptsetup>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-debug

@@ -16,4 +16,6 @@ profile systemd-generator-debug @{exec_path} flags=(attach_disconnected)  {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-debug>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-ds-identify

@@ -40,3 +40,5 @@ profile systemd-generator-ds-identify @{exec_path} flags=(attach_disconnected) {
   include if exists <local/systemd-generator-ds-identify>
 }
 
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-environment-arch

@@ -17,4 +17,6 @@ profile systemd-generator-environment-arch @{exec_path} {
   @{sh_path}        r,
 
   include if exists <local/systemd-generator-environment-arch>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-environment-flatpak

@@ -21,4 +21,6 @@ profile systemd-generator-environment-flatpak @{exec_path} {
   /dev/tty rw,
 
   include if exists <local/systemd-generator-environment-flatpak>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-fstab

@@ -23,4 +23,6 @@ profile systemd-generator-fstab @{exec_path} {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-fstab>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-getty

@@ -24,4 +24,6 @@ profile systemd-generator-getty @{exec_path} flags=(attach_disconnected)  {
   owner /dev/ttyS@{int} rw,
 
   include if exists <local/systemd-generator-getty>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-gpt-auto

@@ -30,4 +30,6 @@ profile systemd-generator-gpt-auto @{exec_path} flags=(attach_disconnected)  {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-gpt-auto>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-hibernate-resume

@@ -16,4 +16,6 @@ profile systemd-generator-hibernate-resume @{exec_path} flags=(attach_disconnect
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-hibernate-resume>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-integritysetup

@@ -16,4 +16,6 @@ profile systemd-generator-integritysetup @{exec_path} flags=(attach_disconnected
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-integritysetup>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-ostree

@@ -15,4 +15,6 @@ profile systemd-generator-ostree @{exec_path} flags=(attach_disconnected) {
   @{PROC}/cmdline r,
 
   include if exists <local/systemd-generator-ostree>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-run

@@ -22,4 +22,6 @@ profile systemd-generator-run @{exec_path} flags=(attach_disconnected) {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-run>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-system-update

@@ -16,4 +16,6 @@ profile systemd-generator-system-update @{exec_path} flags=(attach_disconnected)
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-system-update>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-user-autostart

@@ -25,3 +25,5 @@ profile systemd-generator-user-autostart @{exec_path} {
 
   include if exists <local/systemd-generator-user-autostart>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-user-environment

@@ -30,3 +30,5 @@ profile systemd-generator-user-environment @{exec_path} {
 
   include if exists <local/systemd-generator-user-environment>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-generator-veritysetup

@@ -18,4 +18,6 @@ profile systemd-generator-veritysetup @{exec_path} flags=(attach_disconnected) {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/systemd-generator-veritysetup>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-homed

@@ -82,4 +82,6 @@ profile systemd-homed @{exec_path} flags=(attach_disconnected) {
   /dev/shm/ r,
 
   include if exists <local/systemd-homed>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-homework

@@ -17,4 +17,6 @@ profile systemd-homework @{exec_path} {
   /etc/machine-id r,
 
   include if exists <local/systemd-homework>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-hostnamed

@@ -53,3 +53,5 @@ profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {
 
   include if exists <local/systemd-hostnamed>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-hwdb

@@ -27,3 +27,5 @@ profile systemd-hwdb @{exec_path} flags=(attach_disconnected,mediate_deleted) {
 
   include if exists <local/systemd-hwdb>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-id128

@@ -19,3 +19,5 @@ profile systemd-id128 @{exec_path} {
 
   include if exists <local/systemd-id128>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-inhibit

@@ -22,3 +22,5 @@ profile systemd-inhibit @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-inhibit>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-journald

@@ -89,3 +89,5 @@ profile systemd-journald @{exec_path} {
 
   include if exists <local/systemd-journald>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-localed

@@ -38,3 +38,5 @@ profile systemd-localed @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-localed>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-logind

@@ -144,3 +144,5 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-logind>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-machine-id-setup

@@ -37,3 +37,5 @@ profile systemd-machine-id-setup @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-machine-id-setup>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-machined

@@ -50,3 +50,5 @@ profile systemd-machined @{exec_path} {
 
   include if exists <local/systemd-machined>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-makefs

@@ -21,4 +21,6 @@ profile systemd-makefs @{exec_path} {
   @{bin}/mkswap     rPx,
 
   include if exists <local/systemd-makefs>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-modules-load

@@ -29,3 +29,5 @@ profile systemd-modules-load @{exec_path} {
 
   include if exists <local/systemd-modules-load>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-mount

@@ -24,3 +24,5 @@ profile systemd-mount @{exec_path} {
 
   include if exists <local/systemd-mount>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-network-generator

@@ -18,4 +18,6 @@ profile systemd-network-generator @{exec_path} {
   owner @{run}/systemd/network/{,**} rw,
 
   include if exists <local/systemd-network-generator>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-networkd

@@ -75,3 +75,5 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-networkd>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-networkd-wait-online

@@ -22,3 +22,5 @@ profile systemd-networkd-wait-online @{exec_path} flags=(complain) {
 
   include if exists <local/systemd-networkd-wait-online>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-notify

@@ -17,3 +17,5 @@ profile systemd-notify @{exec_path} {
 
   include if exists <local/systemd-notify>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-oomd

@@ -40,3 +40,5 @@ profile systemd-oomd @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-oomd>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-path

@@ -17,3 +17,5 @@ profile systemd-path @{exec_path} {
 
   include if exists <local/systemd-path>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-portabled

@@ -36,4 +36,6 @@ profile systemd-portabled @{exec_path} {
   /var/lib/portables/{,**} rw,
 
   include if exists <local/systemd-portabled>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-random-seed

@@ -26,3 +26,5 @@ profile systemd-random-seed @{exec_path} {
 
   include if exists <local/systemd-random-seed>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-remount-fs

@@ -37,3 +37,5 @@ profile systemd-remount-fs @{exec_path} {
 
   include if exists <local/systemd-remount-fs>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-resolve

@@ -23,3 +23,5 @@ profile systemd-resolve @{exec_path} {
 
   include if exists <local/systemd-resolve>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-resolved

@@ -53,3 +53,5 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-timesyncd>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-rfkill

@@ -30,3 +30,5 @@ profile systemd-rfkill @{exec_path} {
 
   include if exists <local/systemd-rfkill>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-shutdown

@@ -36,3 +36,5 @@ profile systemd-shutdown @{exec_path} {
 
   include if exists <local/systemd-shutdown>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep

@@ -34,3 +34,5 @@ profile systemd-sleep @{exec_path} {
 
   include if exists <local/systemd-sleep>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep-grub2

@@ -24,4 +24,6 @@ profile systemd-sleep-grub @{exec_path} {
   /dev/tty rw,
 
   include if exists <local/systemd-sleep-grub>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep-hdparm

@@ -13,4 +13,6 @@ profile systemd-sleep-hdparm @{exec_path} {
   @{exec_path} mr,
 
   include if exists <local/systemd-sleep-hdparm>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep-nvidia

@@ -30,4 +30,6 @@ profile systemd-sleep-nvidia @{exec_path} {
   /dev/tty@{int} rw,
 
   include if exists <local/systemd-sleep-nvidia>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep-sysstat

@@ -13,4 +13,6 @@ profile systemd-sleep-sysstat @{exec_path} {
   @{exec_path} mr,
 
   include if exists <local/systemd-sleep-sysstat>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep-tlp

@@ -15,4 +15,6 @@ profile systemd-sleep-tlp @{exec_path} {
   @{bin}/tlp rPUx,
 
   include if exists <local/systemd-sleep-tlp>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sleep-upgrades

@@ -13,4 +13,6 @@ profile systemd-sleep-upgrades @{exec_path} {
   @{exec_path} mr,
 
   include if exists <local/systemd-sleep-upgrades>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-socket-proxyd

@@ -19,4 +19,6 @@ profile systemd-socket-proxyd @{exec_path} {
   @{exec_path} mr,
 
   include if exists <local/systemd-socket-proxyd>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sulogin-shell

@@ -21,4 +21,6 @@ profile systemd-sulogin-shell @{exec_path} {
   @{bin}/sulogin rPx,
 
   include if exists <local/systemd-sulogin-shell>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sysctl

@@ -31,3 +31,5 @@ profile systemd-sysctl @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-sysctl>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-sysusers

@@ -49,3 +49,5 @@ profile systemd-sysusers @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-sysusers>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-timedated

@@ -41,3 +41,5 @@ profile systemd-timedated @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-timedated>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-timesyncd

@@ -46,3 +46,5 @@ profile systemd-timesyncd @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-timesyncd>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-tmpfiles

@@ -59,3 +59,5 @@ profile systemd-tmpfiles @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/systemd-tmpfiles>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-tty-ask-password-agent

@@ -35,3 +35,5 @@ profile systemd-tty-ask-password-agent @{exec_path} {
 
   include if exists <local/systemd-tty-ask-password-agent>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-udevd

@@ -130,3 +130,5 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
 
   include if exists <local/systemd-udevd>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-update-done

@@ -29,4 +29,6 @@ profile systemd-update-done @{exec_path} {
   @{PROC}/sys/kernel/osrelease r,
 
   include if exists <local/systemd-update-done>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-update-utmp

@@ -25,4 +25,6 @@ profile systemd-update-utmp @{exec_path} {
   @{run}/systemd/private rw,
 
   include if exists <local/systemd-update-utmp>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-user-runtime-dir

@@ -32,4 +32,6 @@ profile systemd-user-runtime-dir @{exec_path} {
   @{run}/user/@{uid}/{,**} rw,
 
   include if exists <local/systemd-user-runtime-dir>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-user-sessions

@@ -22,4 +22,6 @@ profile systemd-user-sessions @{exec_path} {
   @{run}/host/container-manager r,
 
   include if exists <local/systemd-user-sessions>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-userdbd

@@ -36,4 +36,6 @@ profile systemd-userdbd @{exec_path} flags=(attach_disconnected,mediate_deleted)
   @{PROC}/pressure/memory r,
 
   include if exists <local/systemd-userdbd>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-userwork

@@ -22,4 +22,6 @@ profile systemd-userwork @{exec_path} flags=(attach_disconnected) {
   /etc/shadow r,
 
   include if exists <local/systemd-userwork>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/systemd-vconsole-setup

@@ -38,4 +38,6 @@ profile systemd-vconsole-setup @{exec_path} {
   /dev/tty@{int} rwk,
 
   include if exists <local/systemd-vconsole-setup>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/userdbctl

@@ -26,4 +26,6 @@ profile userdbctl @{exec_path} {
   @{PROC}/@{pid}/cgroup r,
 
   include if exists <local/userdbctl>
-}
+}
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/zram-generator

@@ -37,3 +37,5 @@ profile zram-generator @{exec_path} flags=(attach_disconnected) {
 
   include if exists <local/zram-generator>
 }
+
+# vim:syntax=apparmor

apparmor.d/groups/systemd/zramctl

@@ -20,4 +20,6 @@ profile zramctl @{exec_path} {
   /dev/zram@{int} rw,
 
   include if exists <local/zramctl>
-}
+}
+
+# vim:syntax=apparmor