feat(profile): remove rules already included in the base abs.

apparmor.d/groups/systemd/systemd-logind

@@ -97,7 +97,6 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected) {
   @{run}/systemd/inhibit/ rw,
   @{run}/systemd/inhibit/.#* rw,
   @{run}/systemd/inhibit/@{int}{,.ref} rw,
-  @{run}/systemd/journal/socket rw,
   @{run}/systemd/notify rw,
   @{run}/systemd/seats/ rw,
   @{run}/systemd/seats/.#seat* rw,

apparmor.d/groups/systemd/systemd-oomd

@@ -24,10 +24,9 @@ profile systemd-oomd @{exec_path} flags=(attach_disconnected) {
   /etc/systemd/oomd.conf r,
   /etc/systemd/oomd.conf.d/{,**} r,
 
-        @{run}/systemd/io.system.ManagedOOM rw,
-        @{run}/systemd/io.systemd.ManagedOOM rw,
-        @{run}/systemd/notify rw,
-  owner @{run}/systemd/journal/socket w,
+  @{run}/systemd/io.system.ManagedOOM rw,
+  @{run}/systemd/io.systemd.ManagedOOM rw,
+  @{run}/systemd/notify rw,
 
   @{sys}/fs/cgroup/cgroup.controllers r,
   @{sys}/fs/cgroup/memory.* r,

apparmor.d/groups/systemd/systemd-resolved

@@ -41,10 +41,9 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
   /etc/systemd/resolved.conf r,
   /etc/systemd/resolved.conf.d/{,*} r,
 
-        @{run}/systemd/netif/links/* r,
-        @{run}/systemd/notify rw,
-        @{run}/systemd/resolve/{,**} rw,
-  owner @{run}/systemd/journal/socket w,
+  @{run}/systemd/netif/links/* r,
+  @{run}/systemd/notify rw,
+  @{run}/systemd/resolve/{,**} rw,
 
   @{PROC}/@{pid}/cgroup r,
   @{PROC}/pressure/* r,

apparmor.d/groups/systemd/systemd-sleep-grub2

@@ -19,8 +19,6 @@ profile systemd-sleep-grub @{exec_path} {
 
   /etc/sysconfig/bootloader r,
 
-  @{PROC}/@{pid}/maps r,
-
   /dev/tty rw,
 
   include if exists <local/systemd-sleep-grub>

apparmor.d/groups/systemd/systemd-timesyncd

@@ -38,7 +38,6 @@ profile systemd-timesyncd @{exec_path} flags=(attach_disconnected) {
         @{run}/systemd/netif/state r,
         @{run}/systemd/notify rw,
         @{run}/systemd/timesyncd.conf.d/{,**} r,
-  owner @{run}/systemd/journal/socket w,
   owner @{run}/systemd/timesync/synchronized rw,
 
   @{PROC}/@{pid}/cgroup r,