Update profiles.

apparmor.d/groups/bus/dbus-daemon

@@ -18,6 +18,7 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
   capability sys_resource,
 
   signal (receive) set=(term hup kill) peer=gdm*,
+  signal (receive) set=(term hup kill) peer=at-spi-bus-launcher,
   signal (send)    set=(term hup kill) peer=at-spi-bus-launcher,
   signal (send)    set=(term hup kill) peer=xdg-permission-store,
 

apparmor.d/groups/pacman/pacman

@@ -51,6 +51,7 @@ profile pacman @{exec_path} {
   /{usr/,}bin/chmod                       rix,
   /{usr/,}bin/dot                         rix,
   /{usr/,}bin/env                         rix,
+  /{usr/,}bin/filecap                     rix,
   /{usr/,}bin/getent                      rix,
   /{usr/,}bin/gettext                     rix,
   /{usr/,}bin/ghc-pkg-*                   rix,

apparmor.d/groups/systemd/bootctl

@@ -32,6 +32,8 @@ profile bootctl @{exec_path} {
   /boot/loader/.#bootctlrandom-seed[0-9a-f]* rw,
   /boot/loader/random-seed w,
 
+   /etc/machine-id r,
+
   @{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name} r,
 
   @{sys}/firmware/efi/efivars/ r,