feat(profiles): general update.

apparmor.d/groups/systemd/systemd-localed

@@ -11,6 +11,7 @@ include <tunables/global>
 profile systemd-localed @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/consoles>
+  include <abstractions/dbus-strict>
   include <abstractions/systemd-common>
 
   # Needed?

apparmor.d/groups/systemd/systemd-tmpfiles

@@ -39,6 +39,7 @@ profile systemd-tmpfiles @{exec_path} flags=(attach_disconnected) {
   /dev/{,**} rw,
   /etc/{,**} r,
   /home/ rw,
+  /opt/{,**} rw,
   /run/{,**} rw,
   /srv/{,**} rw,
   /tmp/{,**} rwk,
@@ -50,6 +51,7 @@ profile systemd-tmpfiles @{exec_path} flags=(attach_disconnected) {
 
   @{PROC}/@{pid}/net/unix r,
   @{PROC}/1/cmdline r,
+  @{PROC}/sched_debug w,
 
   deny /apparmor/.null rw,