dh_apparmor is still only called on Ubuntu: if [ "$(DISTRIBUTION)" = "Ubuntu" ]; then \ dh_apparmor -pmysql-server-5.5 --profile-name=usr.sbin.mysqld; \ fi That means all the postinst magic is missing to create /etc/apparmor.d/local/usr.sbin.mysqld and load the profile. Cheers, Felix