This init script is shared between Debian and Ubuntu, so we can't modify it as you've suggested. In fact, Debian's lack of caching means it's even more critical to use the "xargs -P" path to avoid big delays at boot.
I'd like to find a way to handle early loading of profiles in some other way. Ubuntu's network bring-up via upstart will actually run apparmor_parser directly for any profiles that have been linked into a special directory. I think it would probably make sense to put this into the init scripts of any services that want to load a profile before the main AppArmor init script runs. -Kees -- Kees Cook @debian.org -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
