feat(profile): cleanup some rules already included in abs.

apparmor.d/groups/gnome/gdm-session-worker

@@ -60,7 +60,6 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
   @{exec_path} mrix,
 
   @{bin}/gnome-keyring-daemon             rPx,
-  @{bin}/unix_chkpwd                      rPx,
   @{etc_ro}/X11/xdm/Xstartup             rPUx,
   @{lib}/{,gdm/}gdm-{x,wayland}-session   rPx -> gdm-session,
   /etc/gdm{3,}/{Pre,Post}Session/Default  rix,

apparmor.d/groups/gnome/gnome-disk-image-mounter

@@ -10,23 +10,18 @@ include <tunables/global>
 profile gnome-disk-image-mounter @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
-  include <abstractions/fonts>
-  include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
-  include <abstractions/X-strict>
+  include <abstractions/gnome-strict>
 
   @{exec_path} mr,
 
-  /usr/share/X11/xkb/{,**} r,
-
   # Allow to mount user files
   owner @{HOME}/{,**} r,
   owner @{MOUNTS}/{,**} r,
   owner /tmp/*/{,**} r,
 
-  owner @{PROC}/@{pid}/mountinfo r,
-
   @{run}/mount/utab r,
 
+  owner @{PROC}/@{pid}/mountinfo r,
+
   include if exists <local/gnome-disk-image-mounter>
 }

apparmor.d/groups/gnome/gnome-software

@@ -101,7 +101,6 @@ profile gnome-software @{exec_path} {
 
         @{PROC}/@{pids}/mounts r,
         @{PROC}/sys/fs/pipe-max-size r,
-        @{PROC}/sys/kernel/random/boot_id r,
         @{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,
   owner @{PROC}/@{pid}/cmdline r,
   owner @{PROC}/@{pid}/fdinfo/@{int} r,