/proc/sys/kernel/random/boot_id is part of nameservice-strict.

apparmor.d/groups/gnome/gdm

@@ -54,7 +54,6 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
         @{PROC}/1/environ r,
         @{PROC}/cmdline r,
         @{PROC}/sys/kernel/osrelease r,
-        @{PROC}/sys/kernel/random/boot_id r,
 
   include if exists <local/gdm>
 }

apparmor.d/groups/gnome/gdm-session-worker

@@ -65,7 +65,6 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/loginuid rw,
   owner @{PROC}/@{pid}/uid_map r,
-  owner @{PROC}/sys/kernel/random/boot_id r,
 
   /dev/tty rw,
   /dev/tty[0-9]* rw,

apparmor.d/groups/gnome/nautilus

@@ -46,7 +46,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/mountinfo r,
   owner @{PROC}/@{pid}/net/wireless r,
-        @{PROC}/sys/kernel/random/boot_id r,
 
   @{run}/mount/utab r,
   @{run}/systemd/userdb/ r,