feat(abs): deny apparmor/.null in the base abstraction.

apparmor.d/profiles-a-f/apparmor_parser

@@ -44,7 +44,5 @@ profile apparmor_parser @{exec_path} flags=(attach_disconnected) {
         @{PROC}/sys/kernel/osrelease r,
   owner @{PROC}/@{pid}/mounts r,
 
-  deny /apparmor/.null rw,
-
   include if exists <local/apparmor_parser>
 }

apparmor.d/profiles-a-f/dkms

@@ -111,9 +111,6 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
         @{PROC}/sys/kernel/osrelease r,
   owner @{PROC}/@{pid}/fd/ r,
 
-  # Inherit silencer
-  deny /apparmor/.null rw,
-
   profile kmod {
     include <abstractions/base>
     include <abstractions/consoles>
@@ -134,8 +131,6 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
 
     @{sys}/module/compression r,
 
-    deny /apparmor/.null rw,
-
     include if exists <local/dkms_kmod>
   }
 

apparmor.d/profiles-a-f/findmnt

@@ -23,7 +23,6 @@ profile findmnt @{exec_path} flags=(attach_disconnected,complain) {
   @{PROC}/@{pids}/mountinfo r,
 
   # File Inherit
-  deny /apparmor/.null rw,
   deny unix (receive) type=stream,
 
   include if exists <local/findmnt>

apparmor.d/profiles-a-f/firecfg

@@ -37,7 +37,5 @@ profile firecfg @{exec_path} flags=(attach_disconnected) {
 
   /dev/tty rw,
 
-  deny /apparmor/.null rw,
-
   include if exists <local/firecfg>
 }