Comment 8 for bug 1227937

The LXC container on touch has always been lxc.aa_profile=unconfined so whether apparmor is ready or not shouldn't matter since it's configured not to use it.

If we did want apparmor to protect the container, then we'd indeed have a race at the moment, but since we don't, I'm pretty confused as to how you ended up with the reject.