fix(profile): multiple minor fixes.

fix #493 #480

apparmor.d/groups/children/child-pager

@@ -37,6 +37,8 @@ profile child-pager {
   owner @{user_state_dirs}/ r,
   owner @{user_state_dirs}/lesshs* rw,
 
+  /dev/tty@{int} rw,
+
   include if exists <local/child-pager>
 }
 

apparmor.d/groups/pacman/archlinux-keyring-wkd-sync

@@ -30,7 +30,7 @@ profile archlinux-keyring-wkd-sync @{exec_path} {
   /etc/pacman.conf r,
   /etc/pacman.d/*-mirrorlist r,
   /etc/pacman.d/gnupg/ rw,
-  /etc/pacman.d/gnupg/** rwk -> /etc/pacman.d/gnupg/**,
+  /etc/pacman.d/gnupg/** rwlk -> /etc/pacman.d/gnupg/**,
   /etc/pacman.d/mirrorlist r,
 
   owner @{PROC}/@{pid}/fd/ r,

apparmor.d/groups/systemd/systemd-generator-user-environment

@@ -12,6 +12,8 @@ profile systemd-generator-user-environment @{exec_path} {
   include <abstractions/common/systemd>
   include <abstractions/nameservice-strict>
 
+  capability net_admin,
+
   @{exec_path} mr,
 
   @{sh_path}         rix,

apparmor.d/groups/systemd/systemd-journald

@@ -49,6 +49,7 @@ profile systemd-journald @{exec_path} {
   @{run}/udev/data/+acpi:*      r,
   @{run}/udev/data/+bluetooth:* r,
   @{run}/udev/data/+hid:* r,              # for HID-Compliant Keyboard
+  @{run}/udev/data/+ieee80211:* r,
   @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
   @{run}/udev/data/+mdio_bus:* r,
   @{run}/udev/data/+pci:*       r,