feat(profiles): improve ubuntu compatibility.

apparmor.d/profiles-m-r/mkinitramfs

@@ -97,8 +97,9 @@ profile mkinitramfs @{exec_path} {
 
     /{usr/,}bin/ldd mr,
 
-    /{usr/,}bin/kmod mr,
     /{usr/,}bin/{,ba,da}sh rix,
+    /{usr/,}bin/kmod mr,
+    /{usr/,}lib/initramfs-tools/bin/* mr,
 
     /{usr/,}lib/@{multiarch}/ld-*.so*  rix,
     /{usr/,}lib{,x}32/ld-*.so          rix,

apparmor.d/profiles-m-r/qemu-ga

@@ -10,8 +10,14 @@ include <tunables/global>
 profile qemu-ga @{exec_path} {
   include <abstractions/base>
 
+  capability mknod,
+  capability net_admin,
+  capability sys_ptrace,
+
   @{exec_path} mr,
 
+  /{usr/,}bin/systemctl rix,
+
   /etc/qemu/qemu-ga.conf r,
 
   owner @{run}/qga.state* rw,