feat(profiles): general update.

apparmor.d/profiles-m-r/mkinitramfs

@@ -88,6 +88,7 @@ profile mkinitramfs @{exec_path} {
   owner /var/tmp/mkinitramfs-* rw,
 
   owner @{PROC}/@{uid}/fd/ r,
+        @{PROC}/cmdline r,
         @{PROC}/modules r,
 
   profile ldd {

apparmor.d/profiles-m-r/qemu-ga

@@ -14,6 +14,8 @@ profile qemu-ga @{exec_path} {
   capability net_admin,
   capability sys_ptrace,
 
+  ptrace peer=unconfined,
+
   @{exec_path} mr,
 
   /{usr/,}bin/systemctl rix,

apparmor.d/profiles-m-r/run-parts

@@ -187,7 +187,7 @@ profile run-parts @{exec_path} {
     /etc/modprobe.d/*.conf r,
 
     @{run}/reboot-required w,
-    @{run}/reboot-required.pkgs w,
+    @{run}/reboot-required.pkgs rw,
 
     @{PROC}/devices r,
     @{PROC}/cmdline r,