feat(profiles): general update.

apparmor.d/profiles-g-l/lvm

@@ -13,13 +13,15 @@ profile lvm @{exec_path} {
   include <abstractions/dbus-strict>
   include <abstractions/disks-write>
 
+  capability mknod,
+  capability net_admin,
   capability sys_admin,
   capability sys_nice,
-  capability net_admin,
+  capability sys_rawio,
 
   @{exec_path} rm,
 
-  @{etc_rw}/lvm/** r,
+  @{etc_rw}/lvm/** rwkl,
 
   @{run}/lvm/** rwk,
   @{run}/lock/lvm/* rwk,
@@ -33,6 +35,7 @@ profile lvm @{exec_path} {
         @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/mounts r,
 
+  /dev/**/ r,
   /dev/mapper/control rw,
 
   include if exists <local/lvm>