/proc/sys/kernel/random/boot_id is part of nameservice-strict.

apparmor.d/profiles-s-z/su

@@ -46,7 +46,6 @@ profile su @{exec_path} {
   /etc/shells r,
 
         @{PROC}/1/limits r,
-        @{PROC}/sys/kernel/random/boot_id r,
   owner @{PROC}/@{pids}/loginuid r,
   owner @{PROC}/@{pids}/cgroup r,
   owner @{PROC}/@{pids}/mountinfo r,

apparmor.d/profiles-s-z/sudo

@@ -79,8 +79,6 @@ profile sudo @{exec_path} {
   @{run}/systemd/userdb/ r,
   @{run}/systemd/userdb/io.systemd.DynamicUser rw,
 
-  @{PROC}/sys/kernel/random/boot_id r,
-
   /dev/ r,    # interactive login
   /dev/ptmx rw,