intrigeri: > Drawbacks of shipping not-quite-ready-yet profiles (in complain mode) > in /etc/apparmor.d/:
Here's another one, that might be a deal breaker: * 'deny' rules are enforced even in complain mode, so *all* AppArmor users are affected by any bug in such rules