New @{uuid} variable.

apparmor.d/profiles-g-l/lightdm-gtk-greeter

@@ -67,7 +67,7 @@ profile lightdm-gtk-greeter @{exec_path} {
           @{PROC}/cmdline r,
           @{PROC}/sys/kernel/osrelease r,
 
-    @{sys}/firmware/efi/efivars/SecureBoot-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]* r,
+    @{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
 
     # file_inherit
     /var/log/lightdm/seat[0-9]*-greeter.log w,

apparmor.d/profiles-g-l/logrotate

@@ -63,7 +63,7 @@ profile logrotate @{exec_path} flags=(attach_disconnected, complain) {
   #  logrotate[]: error: could not change directory to '.'
   / r,
 
-  @{sys}/firmware/efi/efivars/SecureBoot-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]* r,
+  @{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
 
   profile systemctl flags=(attach_disconnected, complain) {
     include <abstractions/base>