That sounds like you have one or more profile files that lack include <tunables/global> in their preamble/header.Unfortunately apparmor_parser doesn't report which file has this issue [1], therefore you'll need to check yourself with grep -L tunables/global /etc/apparmor.d/*
Doesn't seem to be the case though, as the only output of that is grep: /etc/apparmor.d/abi: Is a directory /etc/apparmor.d/abi grep: /etc/apparmor.d/abstractions: Is a directory /etc/apparmor.d/abstractions grep: /etc/apparmor.d/DEBIAN: Is a directory /etc/apparmor.d/DEBIAN grep: /etc/apparmor.d/disable: Is a directory /etc/apparmor.d/disable grep: /etc/apparmor.d/force-complain: Is a directory /etc/apparmor.d/force-complain grep: /etc/apparmor.d/libvirt: Is a directory /etc/apparmor.d/libvirt grep: /etc/apparmor.d/local: Is a directory /etc/apparmor.d/local grep: /etc/apparmor.d/tunables: Is a directory /etc/apparmor.d/tunables But If that means you want a list of files that to contain "PROC" but are missing "tunables/global", I made a list with grep -rl "PROC" . | grep -v "tunables/global" From package apparmor: abstractions/apparmor_api/change_profile abstractions/apparmor_api/examine abstractions/apparmor_api/find_mountpoint abstractions/apparmor_api/introspect abstractions/ubuntu-browsers.d/java abstractions/ubuntu-browsers.d/plugins-common abstractions/apache2-common abstractions/bash abstractions/crypto abstractions/gio-open abstractions/gnome abstractions/mesa abstractions/nss-systemd abstractions/opencl-nvidia abstractions/opencl-pocl abstractions/postfix-common abstractions/samba-rpcd abstractions/ubuntu-konsole abstractions/audio abstractions/base abstractions/exo-open abstractions/kde-open5 abstractions/nameservice abstractions/nvidia abstractions/snap_browsers abstractions/pasta lsb_release nvidia_modprobe evince: abstractions/evince usr.bin.evince passt: abstractions/passt libvirt-daemon-driver-lxc: abstractions/libvirt-lxc libvirt-daemon-driver-qemu: abstractions/libvirt-qemu isc-dhcp-client: sbin.dhclient thunderbird: usr.bin.thunderbird libreoffice-common: usr.lib.libreoffice.program.soffice.bin ibus-hangul: usr.libexec.ibus-engine-hangul cups-daemon: usr.sbin.cupsd ntpsec/openntpd: usr.sbin.ntpd libvirt-daemon: usr.sbin.libvirtd libvirt-daemon-common: usr.lib.libvirt.virt-aa-helper
