Various updates (#209)

apparmor.d/profiles-g-l/kmod

@@ -15,6 +15,7 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
   include <abstractions/nameservice-strict>
   include <abstractions/openssl>
 
+  capability dac_read_search,
   capability dac_override,
   capability mknod,
   capability net_admin,
@@ -70,6 +71,8 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
   @{PROC}/cmdline r,
   @{PROC}/modules r,
 
+  /dev/tty@{int} rw,
+
   deny /apparmor/.null rw,
   deny @{user_share_dirs}/gvfs-metadata/* r,
 

apparmor.d/profiles-g-l/lvm

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/lvm
-profile lvm @{exec_path} {
+profile lvm @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/dbus-strict>
@@ -43,5 +43,7 @@ profile lvm @{exec_path} {
   /dev/**/ r,
   /dev/mapper/control rw,
 
+  deny /apparmor/.null rw,
+
   include if exists <local/lvm>
 }