Update profiles.

apparmor.d/groups/systemd/systemd-makefs

@@ -10,9 +10,17 @@ include <tunables/global>
 profile systemd-makefs @{exec_path} {
   include <abstractions/base>
 
+  capability net_admin,
+  capability sys_resource,
+
   @{exec_path} mr,
 
   /{usr/,}{s,}bin/mkswap     rPx,
 
+  @{sys}/devices/virtual/block/zram[0-9]*/ r,
+  @{sys}/devices/virtual/block/zram[0-9]*/** r,
+
+  /dev/zram[0-9]* rwk,
+
   include if exists <local/systemd-makefs>
 }