/proc/sys/kernel/random/boot_id is part of nameservice-strict.

apparmor.d/groups/systemd/hostnamectl

@@ -14,7 +14,5 @@ profile hostnamectl @{exec_path} {
 
   /etc/machine-id r,
 
-  @{PROC}/sys/kernel/random/boot_id r,
-
   include if exists <local/hostnamectl>
 }

apparmor.d/groups/systemd/systemd-journald

@@ -67,7 +67,6 @@ profile systemd-journald @{exec_path} {
   @{PROC}/@{pids}/sessionid r,
   @{PROC}/@{pids}/loginuid r,
   @{PROC}/@{pids}/cgroup r,
-  @{PROC}/sys/kernel/random/boot_id r,
   @{PROC}/sys/kernel/hostname r,
 
   /dev/kmsg rw,

apparmor.d/groups/systemd/systemd-resolved

@@ -41,7 +41,6 @@ profile systemd-resolved @{exec_path} {
   @{PROC}/cmdline r,
   @{PROC}/sys/kernel/hostname r,
   @{PROC}/sys/kernel/osrelease r,
-  @{PROC}/sys/kernel/random/boot_id r,
 
   # System access
   @{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,

apparmor.d/groups/systemd/systemd-udevd

@@ -93,7 +93,6 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected complain) {
   owner @{PROC}/@{pid}/fd/ r,
         @{PROC}/@{pids}/cgroup r,
         @{PROC}/devices r,
-        @{PROC}/sys/kernel/random/boot_id r,
 
   # file_inherit
   owner @{HOME}/.xsession-errors w,

apparmor.d/groups/systemd/userdbctl

@@ -25,7 +25,6 @@ profile userdbctl @{exec_path} {
   @{run}/systemd/userdb/ r,
 
   @{PROC}/@{pid}/cgroup r,
-  @{PROC}/sys/kernel/random/boot_id r,
 
   include if exists <local/userdbctl>
 }