feat(profile): general update.

Also include some preparation for the systemd profile.

apparmor.d/profiles-g-l/haveged

@@ -25,8 +25,8 @@ profile haveged @{exec_path} {
   @{PROC}/sys/kernel/random/write_wakeup_threshold w,
   /dev/random w,
 
-  @{sys}/devices/system/cpu/cpu*/cache/ r,
-  @{sys}/devices/system/cpu/cpu*/cache/index*/{type,size,level} r,
+  @{sys}/devices/system/cpu/cpu@{int}/cache/ r,
+  @{sys}/devices/system/cpu/cpu@{int}/cache/index*/{type,size,level} r,
 
   include if exists <local/haveged>
 }

apparmor.d/profiles-g-l/irqbalance

@@ -7,7 +7,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/irqbalance
-profile irqbalance @{exec_path} {
+profile irqbalance @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
 
   capability setpcap,

apparmor.d/profiles-g-l/lvm

@@ -27,6 +27,7 @@ profile lvm @{exec_path} flags=(attach_disconnected) {
 
   @{etc_rw}/lvm/** rwkl,
 
+  @{run}/lock/ rw,
   @{run}/lock/lvm/ rw,
   @{run}/lock/lvm/* rwk,
   @{run}/lvm/** rwk,