feat(profile): general update.

apparmor.d/groups/systemd/systemd-generator-gpt-auto

@@ -20,6 +20,7 @@ profile systemd-generator-gpt-auto @{exec_path} flags=(attach_disconnected)  {
   /boot/ r,
   /efi/ r,
   /etc/fstab r,
+  /usr/ r,
 
   @{run}/systemd/generator.late/**.{,auto}mount w,
   @{run}/systemd/generator.late/local-fs.target.wants/ w,

apparmor.d/groups/systemd/systemd-hostnamed

@@ -32,6 +32,7 @@ profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {
   /etc/.#machine-info@{rand6} rw,
   /etc/machine-id r,
   /etc/machine-info rw,
+  /etc/os-release r,
 
   @{run}/systemd/default-hostname rw,
   @{run}/systemd/notify rw,

apparmor.d/groups/systemd/systemd-shutdown

@@ -17,6 +17,8 @@ profile systemd-shutdown @{exec_path} {
   capability sys_ptrace,
   capability sys_resource,
 
+  mount options=(rw rprivate) -> /,
+
   signal (send)    set=(stop, cont, term, kill),
   signal (receive) set=(rtmin+23) peer=plymouthd,
 
@@ -24,6 +26,7 @@ profile systemd-shutdown @{exec_path} {
 
         @{PROC}/ r,
         @{PROC}/@{pid}/fd/ r,
+        @{PROC}/@{pid}/fdinfo/@{int} r,
         @{PROC}/@{pids}/cmdline r,
   owner @{PROC}/@{pid}/comm r,
   owner @{PROC}/sys/kernel/core_pattern w,