I use the alias feature in reverse (doh!). That one did the trick:
# /etc/apparmor.d/tunables/alias alias / -> /upper/,
I use the alias feature in reverse (doh!). That one did the trick:
# /etc/apparmor. d/tunables/ alias
alias / -> /upper/,