<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<blockquote type="cite"
cite="mid:2089362.YKUYFuaPT4@tux.boltz.de.vu">
<pre wrap="" class="moz-quote-pre">That sounds like you have one or more profile files that lack
include <tunables/global>
in their preamble/header.
Unfortunately apparmor_parser doesn't report which file has this
issue [1], therefore you'll need to check yourself with
grep -L tunables/global /etc/apparmor.d/*
</pre>
</blockquote>
<p><br>
</p>
<p>Doesn't seem to be the case though, as the only output of that is</p>
<p>grep: /etc/apparmor.d/abi: Is a directory<br>
/etc/apparmor.d/abi<br>
grep: /etc/apparmor.d/abstractions: Is a directory<br>
/etc/apparmor.d/abstractions<br>
grep: /etc/apparmor.d/DEBIAN: Is a directory<br>
/etc/apparmor.d/DEBIAN<br>
grep: /etc/apparmor.d/disable: Is a directory<br>
/etc/apparmor.d/disable<br>
grep: /etc/apparmor.d/force-complain: Is a directory<br>
/etc/apparmor.d/force-complain<br>
grep: /etc/apparmor.d/libvirt: Is a directory<br>
/etc/apparmor.d/libvirt<br>
grep: /etc/apparmor.d/local: Is a directory<br>
/etc/apparmor.d/local<br>
grep: /etc/apparmor.d/tunables: Is a directory<br>
/etc/apparmor.d/tunables</p>
<p>But If that means you want a list of files that to contain "PROC"
but are missing "<span style="white-space: pre-wrap">tunables/global", I made a list with </span></p>
<p><span style="white-space: pre-wrap">grep -rl "PROC" . | grep -v "tunables/global"</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">From package apparmor:
abstractions/apparmor_api/change_profile
abstractions/apparmor_api/examine
abstractions/apparmor_api/find_mountpoint
abstractions/apparmor_api/introspect
abstractions/ubuntu-browsers.d/java
abstractions/ubuntu-browsers.d/plugins-common
abstractions/apache2-common
abstractions/bash
abstractions/crypto
abstractions/gio-open
abstractions/gnome
abstractions/mesa
abstractions/nss-systemd
abstractions/opencl-nvidia
abstractions/opencl-pocl
abstractions/postfix-common
abstractions/samba-rpcd
abstractions/ubuntu-konsole
abstractions/audio
abstractions/base
abstractions/exo-open
abstractions/kde-open5
abstractions/nameservice
abstractions/nvidia
abstractions/snap_browsers
abstractions/pasta
lsb_release
nvidia_modprobe
</span></p>
<p><span style="white-space: pre-wrap">evince:
abstractions/evince
usr.bin.evince
</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">passt:
abstractions/passt
</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">libvirt-daemon-driver-lxc:
abstractions/libvirt-lxc</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">libvirt-daemon-driver-qemu:
abstractions/libvirt-qemu</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">isc-dhcp-client:
sbin.dhclient
</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">thunderbird:
usr.bin.thunderbird</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">libreoffice-common:
usr.lib.libreoffice.program.soffice.bin
</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">ibus-hangul:
usr.libexec.ibus-engine-hangul</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">cups-daemon:
usr.sbin.cupsd</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">ntpsec/openntpd:
usr.sbin.ntpd
</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">libvirt-daemon:
usr.sbin.libvirtd</span></p>
<p><span style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">libvirt-daemon-common:
usr.lib.libvirt.virt-aa-helper
</span></p>
</body>
</html>