feat(profile): minor improvements.

apparmor.d/groups/systemd/journalctl

@@ -33,6 +33,8 @@ profile journalctl @{exec_path} flags=(attach_disconnected) {
   /var/lib/systemd/catalog/database rw,
   /var/lib/systemd/catalog/.#database* rw,
 
+  /var/log/dmesg w,
+
         /{run,var}/log/journal/ r,
         /{run,var}/log/journal/@{hex32}/ r,
         /{run,var}/log/journal/@{hex32}/system.journal* r,

apparmor.d/groups/systemd/loginctl

@@ -7,7 +7,7 @@ abi <abi/4.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/loginctl
-profile loginctl @{exec_path} {
+profile loginctl @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
   include <abstractions/bus-system>
@@ -27,6 +27,8 @@ profile loginctl @{exec_path} {
         @{PROC}/sys/fs/nr_open r,
   owner @{PROC}/@{pid}/cgroup r,
 
+  /dev/rfkill r,
+
   include if exists <local/loginctl>
 }
 

apparmor.d/groups/systemd/systemd-networkd

@@ -29,7 +29,7 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected) {
   network packet dgram,
   network packet raw,
 
-  unix (bind) type=stream addr=@@{udbus}/bus/systemd-network/bus-api-network,
+  unix bind type=stream addr=@@{udbus}/bus/systemd-network/bus-api-network,
 
   #aa:dbus own bus=system name=org.freedesktop.network1
 

apparmor.d/groups/systemd/systemd-udevd

@@ -42,7 +42,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
   @{bin}/*-print-pci-ids  rix,
   @{bin}/alsactl          rPUx,
   @{bin}/ddcutil          rPx,
-  @{bin}/dmsetup          rPUx,
+  @{bin}/dmsetup          rPx,
   @{bin}/ethtool          rix,
   @{bin}/issue-generator  rPx,
   @{bin}/kmod             rPx,
@@ -56,7 +56,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
   @{bin}/perl             rix,
   @{bin}/setfacl          rix,
   @{bin}/sg_inq           rix,
-  @{bin}/snap             rPUx,
+  @{bin}/snap             rPx,
   @{bin}/systemctl        rCx -> systemctl,
   @{bin}/systemd-run      rix,
   @{bin}/unshare          rix,