Name	Size	Mode	Actions
apparmor.service	1162	0644	editdlrm
blk-availability.service	380	0644	editdlrm
finalrd.service	419	0644	editdlrm
keyboard-setup.service	287	0644	editdlrm
lvm2-lvmpolld.socket	239	0644	editdlrm
lvm2-monitor.service	602	0644	editdlrm
multipathd.service	798	0644	editdlrm
open-iscsi.service	987	0644	editdlrm
setvtrgb.service	330	0644	editdlrm
systemd-pstore.service	811	0644	editdlrm
systemd-timesyncd.service	1764	0644	editdlrm

[Unit] Description=Load AppArmor profiles DefaultDependencies=no Before=sysinit.target After=local-fs.target After=systemd-journald-audit.socket RequiresMountsFor=/var/cache/apparmor AssertPathIsReadWrite=/sys/kernel/security/apparmor/.load ConditionSecurity=apparmor Documentation=man:apparmor(7) Documentation=https://gitlab.com/apparmor/apparmor/wikis/home/ # Don't start this unit on the Ubuntu Live CD ConditionPathExists=!/rofs/etc/apparmor.d # Don't start this unit on the Debian Live CD when using overlayfs ConditionPathExists=!/run/live/overlay/work [Service] Type=oneshot ExecStart=/lib/apparmor/apparmor.systemd reload ExecReload=/lib/apparmor/apparmor.systemd reload # systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement # from running processes (and not being able to re-apply it later). # Upstream systemd developers refused to implement an option that allows overriding # this behaviour, therefore we have to make ExecStop a no-op to error out on the # safe side. # # If you really want to unload all AppArmor profiles, run aa-teardown ExecStop=/bin/true RemainAfterExit=yes [Install] WantedBy=sysinit.target