fix(profiles): minor bug fixes.

apparmor.d/groups/gnome/nautilus

@@ -36,8 +36,10 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
        name=org.freedesktop.FileManager1,
 
   @{exec_path} mr,
-  /{usr/,}bin/{,ba,da}sh rix,
-  /{usr/,}lib/gio-launch-desktop rPx -> child-open,
+
+  /{usr/,}bin/{,ba,da}sh          rix,
+  /{usr/,}bin/firejail           rPUx,
+  /{usr/,}lib/gio-launch-desktop  rPx -> child-open,
 
   /usr/share/nautilus/{,**} r,
   /usr/share/poppler/{,**} r,

apparmor.d/groups/pacman/pacman

@@ -68,6 +68,7 @@ profile pacman @{exec_path} {
   /{usr/,}bin/iscsi-iname                 rix,
   /{usr/,}bin/killall                     rix,
   /{usr/,}bin/ln                          rix,
+  /{usr/,}bin/pkill                       rix,
   /{usr/,}bin/rm                          rix,
   /{usr/,}bin/sed                         rix,
   /{usr/,}bin/setcap                      rix,

apparmor.d/groups/systemd/systemd-logind

@@ -113,7 +113,7 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
   @{run}/systemd/users/@{uid} rw,
 
   @{sys}/class/drm/ r,
-  @{sys}/devices/**/{uevent,enabled,status} r,
+  @{sys}/devices/** r,
   @{sys}/devices/**/brightness rw,
   @{sys}/devices/virtual/tty/tty[0-9]*/active r,
   @{sys}/firmware/efi/efivars/LoaderEntries-@{uuid} r,