feat(profile): improve general integration

See #407

apparmor.d/groups/systemd/systemd-generator-fstab

@@ -13,6 +13,7 @@ profile systemd-generator-fstab @{exec_path} {
 
   capability dac_override,
   capability dac_read_search,
+  capability mknod,
 
   @{exec_path} mr,
 

apparmor.d/groups/systemd/systemd-generator-user-autostart

@@ -16,6 +16,8 @@ profile systemd-generator-user-autostart @{exec_path} {
 
   @{exec_path} mr,
 
+  @{system_share_dirs}/applications/*.desktop r,
+
   @{etc_ro}/xdg/autostart/{,*.desktop} r,
 
   owner @{user_config_dirs}/autostart/{,*.desktop} r,

apparmor.d/groups/systemd/systemd-machined

@@ -49,6 +49,9 @@ profile systemd-machined @{exec_path} {
   @{PROC}/pressure/io r,
   @{PROC}/pressure/memory r,
 
+  /dev/ptmx rw,
+  /dev/pts/@{int} rw,
+
   include if exists <local/systemd-machined>
 }