feat(profile): use the new @{tmp} variable.

It is only used with the owner statement.

apparmor.d/groups/systemd/coredumpctl

@@ -37,8 +37,8 @@ profile coredumpctl @{exec_path} flags=(complain) {
   /{run,var}/log/journal/@{hex32}/system.journal* r,
   /{run,var}/log/journal/@{hex32}/system@@{hex}.journal* r,
 
-  owner /tmp/*.coredump w,
-  owner /tmp/core.* w,
+  owner @{tmp}/*.coredump w,
+  owner @{tmp}/core.* w,
   owner /var/tmp/coredump-* rw,
 
         @{PROC}/1/cgroup r,

apparmor.d/groups/systemd/systemd-analyze

@@ -40,7 +40,7 @@ profile systemd-analyze @{exec_path} {
   /etc/locale.conf r,
   /etc/systemd/** r,
 
-  owner /tmp/systemd-temporary-*/ rw,
+  owner @{tmp}/systemd-temporary-*/ rw,
 
   @{run}/systemd/generator/ r,
   @{run}/systemd/private rw,

apparmor.d/groups/systemd/systemd-dissect

@@ -35,7 +35,7 @@ profile systemd-dissect @{exec_path} flags=(attach_disconnected) {
   @{user_projects_dirs}/{,**} r,
   @{user_vm_dirs}/{,**} r,
 
-  owner /tmp/dissect-@{rand6}/{,**} rw,
+  owner @{tmp}/dissect-@{rand6}/{,**} rw,
 
   @{sys}/devices/virtual/block/loop@{int}/{,**} r,
   @{sys}/kernel/uevent_seqnum r,