All these have been fixed, and e.g. apparmor-profiles-extra in Debian Stretch has the fixes..
** Changed in: apparmor-profiles Status: New => Fix Released -- You received this bug notification because you are a member of AppArmor Developers, which is subscribed to AppArmor Profiles. https://bugs.launchpad.net/bugs/1133409 Title: apt-cacher-ng profile is missing some rules (tcpwrapper and backend configs) Status in AppArmor Profiles: Fix Released Bug description: Using the AA profile result in the following denials during startup: Feb 26 09:20:31 apt kernel: [345183.322578] type=1400 audit(1361888431.203:12): apparmor="DENIED" operation="open" parent=3507 profile="/usr/sbin/apt-cacher-ng" name="/var/lib/apt-cacher-ng/backends_debian.default" pid=3523 comm="apt-cacher-ng" requested_mask="r" denied_mask="r" fsuid=103 ouid=0 Feb 26 09:20:31 apt kernel: [345183.327304] type=1400 audit(1361888431.207:13): apparmor="DENIED" operation="open" parent=3507 profile="/usr/sbin/apt-cacher-ng" name="/etc/hosts.deny" pid=3523 comm="apt-cacher-ng" requested_mask="r" denied_mask="r" fsuid=103 ouid=0 Feb 26 09:20:31 apt kernel: [345183.327316] type=1400 audit(1361888431.207:14): apparmor="DENIED" operation="open" parent=3507 profile="/usr/sbin/apt-cacher-ng" name="/etc/hosts.allow" pid=3523 comm="apt-cacher-ng" requested_mask="r" denied_mask="r" fsuid=103 ouid=0 This affects the profile as shipped in Precise, Quantal and Raring To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor-profiles/+bug/1133409/+subscriptions -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor