feat(profile): general update.

apparmor.d/groups/_full/systemd-user

@@ -21,6 +21,11 @@ profile systemd-user flags=(attach_disconnected,mediate_deleted) {
   include <abstractions/audio>
   include <abstractions/bus-session>
   include <abstractions/bus-system>
+  include <abstractions/bus/org.bluez>
+  include <abstractions/bus/org.freedesktop.Avahi>
+  include <abstractions/bus/org.freedesktop.hostname1>
+  include <abstractions/bus/org.freedesktop.RealtimeKit1>
+  include <abstractions/disks-read>
   include <abstractions/nameservice-strict>
   include <abstractions/video>
 
@@ -31,7 +36,17 @@ profile systemd-user flags=(attach_disconnected,mediate_deleted) {
 
   ptrace (read),
 
+  unix (bind) type=stream addr=@@{hex}/bus/systemd/bus-system,
+
   # dbus: own bus=session name=org.freedesktop.systemd1
+  # dbus: own bus=session name=org.freedesktop.ReserveDevice1.Audio@{int}
+  # dbus: own bus=session name=org.PulseAudio1
+  # dbus: own bus=session name=org.pulseaudio*
+
+  dbus send bus=session path=/org/freedesktop/DBus
+       interface=org.freedesktop.DBus
+       member=GetConnectionUnixUser
+       peer=(name=org.freedesktop.DBus, label=dbus-daemon),
 
   dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable

apparmor.d/groups/pacman/mkinitcpio

@@ -21,7 +21,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} rmix,
 
-  @{bin}/{,ba}sh             rix,
+  @{sh_path}                 rix,
   @{bin}/{m,g,}awk           rix,
   @{bin}/bsdtar              rix,
   @{bin}/cat                 rix,

apparmor.d/groups/pacman/pacman

@@ -49,7 +49,7 @@ profile pacman @{exec_path} {
   @{bin}/gpgsm        rCx -> gpg,
   
   # Pacman hooks & install scripts
-  @{bin}/{,ba}sh                     rix,
+  @{sh_path}                         rix,
   @{bin}/appstreamcli                rPx,
   @{bin}/arch-audit                  rPx,
   @{bin}/archlinux-java              rPx,

apparmor.d/groups/systemd/busctl

@@ -10,7 +10,7 @@ include <tunables/global>
 profile busctl @{exec_path} {
   include <abstractions/base>
   include <abstractions/bus-session>
-  include <abstractions/bus-session>
+  include <abstractions/bus-system>
   include <abstractions/consoles>
   include <abstractions/nameservice-strict>
   include <abstractions/systemd-common>
@@ -23,6 +23,7 @@ profile busctl @{exec_path} {
   unix (bind) type=stream addr=@@{hex}/bus/busctl/busctl,
 
   dbus eavesdrop bus=session,
+  dbus eavesdrop bus=system,
 
   dbus send bus=system path=/org/freedesktop/DBus
        interface=org.freedesktop.DBus.Monitoring