fix(profile): fix issues raised in tests.

apparmor.d/groups/utils/lslocks

@@ -17,6 +17,8 @@ profile lslocks @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  @{sys}/devices/**/block/** r,
+
         @{PROC}/ r,
         @{PROC}/@{pid}/ r,
         @{PROC}/@{pid}/comm r,

apparmor.d/groups/utils/lsns

@@ -28,6 +28,8 @@ profile lsns @{exec_path} flags=(attach_disconnected) {
   @{run}/*/netns/** r,
   @{run}/*/ns/** r,
 
+  @{sys}/devices/**/block/** r,
+
         @{PROC}/ r,
         @{PROC}/@{pid}/ r,
         @{PROC}/@{pid}/stat r,

apparmor.d/profiles-m-r/initramfs-hooks

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /usr/share/initramfs-tools/hooks/** /etc/initramfs-tools/hooks/**
 profile initramfs-hooks @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
   include <abstractions/nameservice-strict>
 
   @{exec_path} mr,
@@ -70,6 +71,7 @@ profile initramfs-hooks @{exec_path} {
 
   profile ldd {
     include <abstractions/base>
+    include <abstractions/consoles>
     include <abstractions/nameservice-strict>
 
     @{bin}/ldd mr,

apparmor.d/profiles-m-r/initramfs-scripts

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /usr/share/initramfs-tools/scripts/** /etc/initramfs-tools/scripts/**
 profile initramfs-scripts @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   @{exec_path} mr,
 

apparmor.d/profiles-m-r/mdadm-mkconf

@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = /usr/share/mdadm/mkconf
 profile mdadm-mkconf @{exec_path} {
   include <abstractions/base>
+  include <abstractions/consoles>
 
   @{exec_path} mr,
 

apparmor.d/profiles-m-r/mkinitramfs

@@ -88,6 +88,7 @@ profile mkinitramfs @{exec_path} {
   owner /boot/initrd.img-*.new rw,
 
         /var/tmp/ r,
+        /var/tmp/mkinitramfs_@{rand6}/** w,
         /var/tmp/modules_@{rand6} rw,
   owner /var/tmp/mkinitramfs_@{rand6} rw,
   owner /var/tmp/mkinitramfs_@{rand6}/ rw,
@@ -98,6 +99,7 @@ profile mkinitramfs @{exec_path} {
   owner /tmp/tmp.@{rand10}/mkinitramfs_@{rand6} rw,
   owner /tmp/tmp.@{rand10}/mkinitramfs_@{rand6}/ rw,
   owner /tmp/tmp.@{rand10}/mkinitramfs_@{rand6}/** rwl -> /tmp/tmp.@{rand10}/mkinitramfs_@{rand6}/**,
+  owner /tmp/tmp.@{rand10}/mkinitramfs_@{rand6}/** w,
   owner /tmp/tmp.@{rand10}/mkinitramfs-@{rand6} rw,
   owner /tmp/tmp.@{rand10}/mkinitramfs-*_@{rand6} rw,