Kees, I think this should be checked centrally in /lib/init/apparmor-profile-load, and not fail if the kernel doesn't support apparmor?
Kees, I think this should be checked centrally in /lib/init/ apparmor- profile- load, and not fail if the kernel doesn't support apparmor?