feat(profiles): better system nss rules in nameservice-strict.

apparmor.d/profiles-g-l/lastlog

@@ -19,7 +19,5 @@ profile lastlog @{exec_path} {
   /var/log/lastlog r,
   /etc/login.defs r,
 
-  @{run}/systemd/userdb/io.systemd.DynamicUser w,
-
   include if exists <local/lastlog>
 }

apparmor.d/profiles-g-l/login

@@ -41,8 +41,6 @@ profile login @{exec_path} {
   /var/log/btmp{,.[0-9]*} r,
 
   @{run}/faillock/root rwk,
-  @{run}/systemd/userdb/ r,
-  @{run}/systemd/userdb/io.systemd.DynamicUser rw,
   @{run}/dbus/system_bus_socket rw,
   @{run}/motd.dynamic{,.new} rw,
   @{run}/systemd/sessions/*.ref rw,