> apparmor_parser -R /etc/apparmor.d
-R means to unload profiles, in this case all profiles in /etc/apparmor.d/. That's probably a bit ;-) too much...
I'd guess you want to unload only the tcpdump profile, which would be done with apparmor_parser -R /etc/apparmor.d/usr.bin.tcpdump
An alternative would be to use aa-remove-unknown (run it with -n to see what it would unload).
> apparmor_parser -R /etc/apparmor.d
-R means to unload profiles, in this case all profiles in /etc/apparmor.d/. That's probably a bit ;-) too much...
I'd guess you want to unload only the tcpdump profile, which would be done with d/usr.bin. tcpdump
apparmor_parser -R /etc/apparmor.
An alternative would be to use aa-remove-unknown (run it with -n to see what it would unload).