From ac916d801c0b536a9e7542f379b16243cb50866a Mon Sep 17 00:00:00 2001
From: Roman Beslik <me@beroal.in.ua>
Date: Sun, 27 Oct 2024 03:35:19 +0300
Subject: [PATCH] /boot/EFI

---
 apparmor.d/groups/pacman/mkinitcpio | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/apparmor.d/groups/pacman/mkinitcpio b/apparmor.d/groups/pacman/mkinitcpio
index a9902e54b..dcf5b10fb 100644
--- a/apparmor.d/groups/pacman/mkinitcpio
+++ b/apparmor.d/groups/pacman/mkinitcpio
@@ -83,9 +83,10 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
 
   # Manage /boot
   / r,
-  /boot/ r,
-  /boot/initramfs-*.img* rw,
-  /boot/vmlinuz-* r,
+  /{boot,efi}/ r,
+  /{boot,efi}/EFI/{,**} rw,
+  /{boot,efi}/initramfs-*.img* rw,
+  /{boot,efi}/vmlinuz-* r,
 
   /usr/share/systemd/bootctl/** r,