Antoine Beaupré: > PS: seems to me like a good example why profiles-extra should be > deployed straight to /etc :p One step at a time: I'd rather see AppArmor enabled by default with a small, robust policy first. And then we can think of extending this policy :) Cheers, -- intrigeri