feat(profiles): general update.

apparmor.d/groups/pacman/pacman

@@ -29,6 +29,9 @@ profile pacman @{exec_path} {
   capability sys_chroot,
   capability sys_resource,
 
+  # network unix stream,
+  # network unix dgram,
+
   network inet stream,
   network inet6 stream,
   network inet dgram,
@@ -66,6 +69,7 @@ profile pacman @{exec_path} {
   /{usr/,}bin/rm                          rix,
   /{usr/,}bin/sed                         rix,
   /{usr/,}bin/setcap                      rix,
+  /{usr/,}bin/touch                       rix,
   /{usr/,}bin/vercmp                      rix,
   /{usr/,}bin/xmlcatalog                  rix,
   /{usr/,}lib/ghc-*/bin/ghc-pkg           rix,

apparmor.d/groups/pacman/pacman-hook-depmod

@@ -18,6 +18,10 @@ profile pacman-hook-depmod @{exec_path} {
   /{usr/,}bin/bash      rix,
   /{usr/,}bin/depmod    rPx,
   /{usr/,}bin/kmod      rPx,
+  /{usr/,}bin/rm        rix,
+  /{usr/,}bin/rmdir     rix,
+
+  /usr/lib/modules/*/{,**} rw,
 
   /dev/tty rw,
 

apparmor.d/groups/pacman/pacman-key

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /{usr/,}bin/pacman-key
 profile pacman-key @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   capability dac_read_search,
   capability mknod,
@@ -32,6 +33,8 @@ profile pacman-key @{exec_path} {
   /usr/share/pacman/keyrings/{,*} r,
   /usr/share/terminfo/x/xterm-256color r,
 
+  /etc/pacman.d/gnupg/gpg.conf r,
+
   /dev/tty rw,
 
   # Inherit Silencer