feat(profile): general update.

apparmor.d/groups/pacman/paccache

@@ -7,9 +7,10 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/paccache
-profile paccache @{exec_path} {
+profile paccache @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/nameservice-strict>
+  include <abstractions/openssl>
 
   capability dac_read_search,
   capability mknod,
@@ -20,8 +21,11 @@ profile paccache @{exec_path} {
   @{bin}/bash         rix,
   @{bin}/cat          rix,
   @{bin}/gettext      rix,
-  @{bin}/pacman       rPx,
-  @{bin}/pacman-conf  rPx,
+  @{bin}/gpg{,2}      rix,
+  @{bin}/gpgconf      rix,
+  @{bin}/gpgsm        rix,
+  @{bin}/pacman       rix,
+  @{bin}/pacman-conf  rix,
   @{bin}/pacsort      rix,
   @{bin}/rm           rix,
   @{bin}/stat         rix,
@@ -31,7 +35,11 @@ profile paccache @{exec_path} {
   /usr/share/makepkg/util/*.sh r,
   /usr/share/terminfo/** r,
 
+  /etc/pacman.conf r,
+  /etc/pacman.d/{,**} r,
+
   /var/cache/pacman/pkg/{,*} rw,
+  /var/lib/pacman/{,**} r,
 
   owner @{PROC}/@{pid}/fd/ r,