Debian 12 Gnome DE

apparmor.d/groups/systemd/systemd-oomd

@@ -33,9 +33,9 @@ profile systemd-oomd @{exec_path} flags=(attach_disconnected) {
 
   @{sys}/fs/cgroup/cgroup.controllers r,
   @{sys}/fs/cgroup/memory.pressure r,
-  @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}0.service/memory.* r,
+  @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/memory.* r,
 
   @{PROC}/pressure/{cpu,io,memory} r,
 
   include if exists <local/systemd-oomd>
-}
+}

apparmor.d/groups/systemd/systemd-shutdown

@@ -8,7 +8,7 @@ abi <abi/3.0>,
 include <tunables/global>
 
 @{exec_path} = @{lib}/systemd/systemd-shutdown
-profile systemd-shutdown @{exec_path} flags=(complain) {
+profile systemd-shutdown @{exec_path} {
   include <abstractions/base>
   include <abstractions/systemd-common>
 
@@ -17,7 +17,8 @@ profile systemd-shutdown @{exec_path} flags=(complain) {
   capability sys_ptrace,
   capability sys_resource,
 
-  signal (send) set=(stop, cont, term, kill),
+  signal (send)    set=(stop, cont, term, kill),
+  signal (receive) set=(rtmin+23) peer=plymouthd,
 
   @{exec_path} mr,
 
@@ -29,5 +30,7 @@ profile systemd-shutdown @{exec_path} flags=(complain) {
   owner @{PROC}/sys/kernel/core_pattern w,
   owner @{PROC}/sys/kernel/printk rw,
 
+  /dev/watchdog@{int} w,
+
   include if exists <local/systemd-shutdown>
 }