feat(profile): general update.

apparmor.d/groups/systemd/networkctl

@@ -43,6 +43,8 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
   /var/lib/dbus/machine-id r,
   /etc/machine-id r,
 
+  owner /var/lib/systemd/network/ r,
+
   # To be able to read logs
   @{run}/log/ r,
   /{run,var}/log/journal/ r,
@@ -60,8 +62,10 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
 
   @{sys}/devices/**/net/**/uevent r,
 
-        @{PROC}/sys/kernel/random/boot_id r,
         @{PROC}/1/cgroup r,
+        @{PROC}/cmdline r,
+        @{PROC}/sys/kernel/osrelease r,
+        @{PROC}/sys/kernel/random/boot_id r,
   owner @{PROC}/@{pid}/cgroup r,
   owner @{PROC}/@{pid}/stat r,
 

apparmor.d/groups/systemd/systemd-homed

@@ -48,6 +48,7 @@ profile systemd-homed @{exec_path} flags=(attach_disconnected) {
   /etc/systemd/homed.conf r,
   /etc/skel/{,**} r,
 
+  /var/cache/systemd/home/{,**} rw,
   /var/lib/systemd/home/{,**} rw,
 
   / r,

apparmor.d/groups/systemd/systemd-hostnamed

@@ -53,6 +53,8 @@ profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {
   @{sys}/firmware/acpi/pm_profile r,
   @{sys}/firmware/dmi/entries/*/raw r,
 
+  /dev/vsock r,
+
   include if exists <local/systemd-hostnamed>
 }
 

apparmor.d/groups/systemd/systemd-networkd

@@ -52,6 +52,8 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected) {
 
   / r,
 
+  owner /var/lib/systemd/network/ r,
+
         @{run}/systemd/network/ r,
         @{run}/systemd/network/*.network r,
         @{run}/systemd/notify rw,