feat(profile): general update.

apparmor.d/groups/systemd/systemd-cryptsetup

@@ -12,6 +12,7 @@ profile systemd-cryptsetup @{exec_path} {
   include <abstractions/common/systemd>
   include <abstractions/disks-write>
 
+  capability dac_read_search,
   capability ipc_lock,
   capability net_admin,
   capability sys_admin,

apparmor.d/groups/systemd/systemd-logind

@@ -63,6 +63,7 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected) {
   /var/lib/systemd/linger/ r,
 
   @{run}/.#nologin* rw,
+  @{run}/credentials/getty@tty@{int}.service/ r,
   @{run}/host/container-manager r,
   @{run}/nologin rw,
   @{run}/utmp rk,

apparmor.d/groups/systemd/systemd-udevd

@@ -52,6 +52,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
   @{bin}/more             rPx -> child-pager,
   @{bin}/multipath        rPx,
   @{bin}/nfsrahead        rix,
+  @{bin}/nvidia-modprobe  rPx -> child-modprobe-nvidia,
   @{bin}/pager            rPx -> child-pager,
   @{bin}/perl             rix,
   @{bin}/setfacl          rix,