feat(profile): general update.

apparmor.d/profiles-a-f/boltd

@@ -25,7 +25,8 @@ profile boltd @{exec_path} flags=(attach_disconnected) {
 
   owner @{run}/boltd/{,**} rw,
 
-  @{run}/systemd/notify rw,
+  @{att}/@{run}/systemd/notify w,
+
   @{run}/udev/data/+thunderbolt:* r,
 
   @{sys}/bus/ r,

apparmor.d/profiles-a-f/frontend

@@ -74,9 +74,12 @@ profile frontend @{exec_path} flags=(complain) {
   /etc/inputrc r,
   /etc/shadow r,
 
-  owner @{tmp}/file* w,
   owner /var/cache/debconf/* rwk,
 
+  owner @{tmp}/file* w,
+  owner @{tmp}/tmp.@{rand10} rw,
+  owner @{tmp}/updateppds.@{rand6} rw,
+
   @{HOME}/.Xauthority r,
 
   @{run}/user/@{uid}/pk-debconf-socket rw,