My initial draft seems to be working fine at first glance: - Upstream MR that implements the bits we need there: https://gitlab.com/apparmor/apparmor/merge_requests/252
- MR that adjusts the Debian packaging to use the proposed upstream code and make the systemd service independent from the initscript: https://salsa.debian.org/apparmor-team/apparmor/merge_requests/11 Cheers, -- intrigeri
