Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables

* 'tunables' of https://github.com/nobody43/apparmor.d:
  dbus temp tails
  Update apparmor.d
  Update gdm-runtime-config
  more unrelated changes
  adjust date-time
  random tails
  rename to int, convert more profiles
  fixes
  tunables

apparmor.d/groups/grub/grub-install

@@ -29,6 +29,7 @@ profile grub-install @{exec_path} flags=(complain) {
   /etc/default/grub.d/{,**} r,
   /etc/default/grub r,
 
+  /boot/efi/EFI/ubuntu/* w,
   /boot/efi/EFI/BOOT/{,**} rw,
   /boot/EFI/*/grubx*.efi rw,
   /boot/grub/{,**} rw,

apparmor.d/groups/grub/grub-multi-install

@@ -17,6 +17,7 @@ profile grub-multi-install @{exec_path} {
   @{bin}/{,ba,da}sh         rix,
   @{bin}/{,e}grep           rix,
   @{bin}/cat                rix,
+  @{bin}/cut                rix,
   @{bin}/dpkg-query         rpx,
   @{bin}/readlink           rix,
   @{bin}/sed                rix,
@@ -33,5 +34,7 @@ profile grub-multi-install @{exec_path} {
   owner @{PROC}/@{pid}/maps r,
   owner @{PROC}/@{pid}/mounts r,
 
+  /dev/disk/by-id/ r,
+
   include if exists <local/grub-multi-install>
-}
+}