Comment 2 for bug 1744443

Most configuration options assume you're not running with apparmor enforcing (as most of then pre-date the introduction of this feature).

We could look to make this 100% dynamic - however that would mean writing some sort of apparmor helper for ceph, which I think is outside the scope of what we should be doing in the charm.

If /srv/storage is somewhere we want to support, then lets add that to the apparmor profile; probably worth noting in the README this specific use case so that followers don't trip on using /srv/<insertrandomstringhere>.