> After latest upgrade I've discovered via `aa-status` that new named profile > `nvidia_modrpobe` is loaded in complain mode:
Good catch! That's because debian/rules does this: # set all profiles in apparmor-profiles to complain mode cd $(CURDIR)/debian/tmp && sh $(CURDIR)/debian/put-all-profiles-in-complain-mode.sh … which unfortunately, now that the apparmor binary package ships its first profile (previously it only shipped abstractions), sets it to complain mode. I'll try to prepare a fix ASAP unless you tell me you're on it.