feat(profile): general update.

apparmor.d/groups/systemd/systemd-machine-id-setup

@@ -19,6 +19,7 @@ profile systemd-machine-id-setup @{exec_path} flags=(attach_disconnected) {
 
   ptrace (read),
 
+  mount options=(rw rshared) -> /, 
   mount options=(rw rslave) -> /,
   umount /etc/machine-id,
 

apparmor.d/groups/systemd/systemd-udevd

@@ -93,6 +93,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
   @{run}/udev/ rw,
   @{run}/udev/** rwk,
 
+  @{run}/credentials/systemd-udev-load-credentials.service/ r,
   @{run}/systemd/network/ r,
   @{run}/systemd/network/*.link rw,
   @{run}/systemd/notify rw,

apparmor.d/groups/systemd/systemd-user-runtime-dir

@@ -20,6 +20,8 @@ profile systemd-user-runtime-dir @{exec_path} {
   capability net_admin,
   capability sys_admin,
 
+  network unix stream,
+
   mount fstype=tmpfs options=(rw,nosuid,nodev) -> @{run}/user/@{uid}/,
   umount @{run}/user/@{uid}/,