Profiles update.

apparmor.d/groups/pacman/pacman

@@ -60,11 +60,13 @@ profile pacman @{exec_path} {
   /{usr/,}bin/glib-compile-schemas        rPx,
   /{usr/,}bin/gtk-query-immodules-{2,3}.0 rPx,
   /{usr/,}bin/install-info                rPx,
+  /{usr/,}bin/journalctl                  rPx,
   /{usr/,}bin/killall                     rPx,
   /{usr/,}bin/pacdiff                     rPx,
   /{usr/,}bin/pacman-key                  rPx,
   /{usr/,}bin/sysctl                      rPx,
   /{usr/,}bin/systemctl                   rPx -> child-systemctl,
+  /{usr/,}bin/systemd-*                   rPx,
   /{usr/,}bin/update-ca-trust             rPx,
   /{usr/,}bin/update-desktop-database     rPx,
   /{usr/,}bin/update-mime-database        rPx,

apparmor.d/groups/pacman/pacman-hook-mkinitcpio-remove

@@ -11,6 +11,7 @@ profile pacman-hook-mkinitcpio-remove @{exec_path} {
   include <abstractions/base>
 
   capability dac_read_search,
+  capability mknod,
 
   @{exec_path} mr,