feat(profile): minor profile improvments.

apparmor.d/groups/systemd/systemd-inhibit

@@ -14,6 +14,8 @@ profile systemd-inhibit @{exec_path} flags=(attach_disconnected) {
   capability net_admin,
   capability sys_resource,
 
+  signal receive set=term peer=packagekitd,
+
   @{exec_path} mr,
 
   @{bin}/cat rix,

apparmor.d/groups/systemd/systemd-network-generator

@@ -17,6 +17,8 @@ profile systemd-network-generator @{exec_path} {
 
   owner @{run}/systemd/network/{,**} rw,
 
+  @{run}/credentials/systemd-network-generator.service/ r,
+
   include if exists <local/systemd-network-generator>
 }
 

apparmor.d/groups/virt/dockerd

@@ -89,7 +89,7 @@ profile dockerd @{exec_path} flags=(attach_disconnected) {
 
   owner @{lib}/containerd/** w,
   owner @{lib}/docker/overlay2/*/work/{,**} rw,
-  owner /var/lib/containerd/** w,
+  owner /var/lib/containerd/** rw,
   owner /var/lib/docker/{,**} rwk,
   owner /var/lib/docker/tmp/qemu-check@{int}/check rix,