General profiles update.

apparmor.d/groups/systemd/systemd-update-utmp

@@ -9,25 +9,17 @@ include <tunables/global>
 @{exec_path} = /{usr/,}lib/systemd/systemd-update-utmp
 profile systemd-update-utmp @{exec_path} {
   include <abstractions/base>
+  include <abstractions/systemd-common>
+  include <abstractions/wutmp>
 
   capability audit_write,
   capability net_admin,
 
   network netlink raw,
 
-  ptrace (read) peer=unconfined,
-
   @{exec_path} mr,
 
-  owner /var/log/wtmp rwk,
-  owner @{run}/utmp rwk,
-
   @{run}/host/container-manager r,
 
-  @{PROC}/1/cmdline r,
-  @{PROC}/1/environ r,
-  @{PROC}/cmdline r,
-  @{PROC}/sys/kernel/osrelease r,
-
   include if exists <local/systemd-update-utmp>
 }