feat(profiles): general update.

apparmor.d/groups/children/child-open

@@ -88,7 +88,7 @@ profile child-open {
   @{bin}/thunderbird       rPx,
   @{bin}/transmission-gtk  rPx,
   @{bin}/viewnior         rPUx,
-  @{bin}/vlc               rPx,
+  @{bin}/vlc               rPUx,
   @{bin}/xarchiver         rPx,
   @{lib}/libreoffice/program/{soffice,soffice.bin,oosplash} rPUx,
 

apparmor.d/groups/children/child-systemctl

@@ -53,6 +53,7 @@ profile child-systemctl flags=(attach_disconnected) {
         @{PROC}/cmdline r,
         @{PROC}/sys/kernel/osrelease r,
         @{PROC}/sys/kernel/random/boot_id r,
+  owner @{PROC}/@{pid}/comm r,
   owner @{PROC}/@{pid}/stat r,
 
   /dev/kmsg w,