fix(profile): snapd journalctl subprofile.

apparmor.d/groups/snap/snapd

@@ -204,6 +204,7 @@ profile snapd @{exec_path} {
     include <abstractions/consoles>
 
     capability net_admin,
+    capability sys_resource,
 
     network netlink raw,
 
@@ -215,6 +216,8 @@ profile snapd @{exec_path} {
     /{run,var}/log/journal/ r,
     /{run,var}/log/journal/@{hex32}/{,*} r,
 
+    @{run}/systemd/notify w,
+
     include if exists <local/snapd_journalctl>
   }