feat(profiles): general update.

apparmor.d/profiles-g-l/groups

@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2017-2021 Mikhail Morfikov
+# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -16,6 +17,10 @@ profile groups @{exec_path} {
   /etc/group r,
   /etc/nsswitch.conf r,
 
+  @{run}/systemd/userdb r,
+
+  @{PROC}/sys/kernel/random/boot_id r,
+
   /dev/tty@{int} rw,
 
   include if exists <local/groups>

apparmor.d/profiles-g-l/lspci

@@ -32,7 +32,7 @@ profile lspci @{exec_path} flags=(attach_disconnected) {
 
   @{sys}/bus/pci/devices/ r,
   @{sys}/bus/pci/slots/ r,
-  @{sys}/bus/pci/slots/@{int}/address r,
+  @{sys}/bus/pci/slots/@{int}-@{int}/address r,
   @{sys}/devices/pci[0-9]*/** r,
 
   @{PROC}/cmdline r,