Current Dir: /snap/core22/2955/usr/lib/systemd/system/sysinit.target.wants/ [FILE] apparmor.service [ edit | delete | rename ] [FILE] cryptsetup.target [ edit | delete | rename ] [FILE] dev-hugepages.mount [ edit | delete | rename ] [FILE] dev-mqueue.mount [ edit | delete | rename ] [FILE] finalrd.service [ edit | delete | rename ] [FILE] kmod-static-nodes.service [ edit | delete | rename ] [FILE] plymouth-start.service [ edit | delete | rename ] [FILE] proc-sys-fs-binfmt_misc.automount [ edit | delete | rename ] [FILE] sys-fs-fuse-connections.mount [ edit | delete | rename ] [FILE] sys-kernel-config.mount [ edit | delete | rename ] [FILE] sys-kernel-debug.mount [ edit | delete | rename ] [FILE] sys-kernel-tracing.mount [ edit | delete | rename ] [FILE] systemd-ask-password-console.path [ edit | delete | rename ] [FILE] systemd-binfmt.service [ edit | delete | rename ] [FILE] systemd-boot-system-token.service [ edit | delete | rename ] [FILE] systemd-journal-flush.service [ edit | delete | rename ] [FILE] systemd-journald.service [ edit | delete | rename ] [FILE] systemd-machine-id-commit.service [ edit | delete | rename ] [FILE] systemd-modules-load.service [ edit | delete | rename ] [FILE] systemd-pstore.service [ edit | delete | rename ] [FILE] systemd-random-seed.service [ edit | delete | rename ] [FILE] systemd-sysctl.service [ edit | delete | rename ] [FILE] systemd-sysusers.service [ edit | delete | rename ] [FILE] systemd-timesyncd.service [ edit | delete | rename ] [FILE] systemd-tmpfiles-setup-dev.service [ edit | delete | rename ] [FILE] systemd-tmpfiles-setup.service [ edit | delete | rename ] [FILE] systemd-udev-trigger.service [ edit | delete | rename ] [FILE] systemd-udevd.service [ edit | delete | rename ] [FILE] systemd-update-utmp.service [ edit | delete | rename ] [FILE] veritysetup.target [ edit | delete | rename ] Viewing: /usr/lib/systemd/system/apparmor.service [Unit] Description=Load AppArmor profiles DefaultDependencies=no Before=sysinit.target After=local-fs.target After=systemd-journald-audit.socket After=systemd-sysctl.service RequiresMountsFor=/var/cache/apparmor AssertPathIsReadWrite=/sys/kernel/security/apparmor/.load ConditionSecurity=apparmor Documentation=man:apparmor(7) Documentation=https://gitlab.com/apparmor/apparmor/wikis/home/ # Don't start this unit on the Ubuntu Live CD ConditionPathExists=!/rofs/etc/apparmor.d # Don't start this unit on the Debian Live CD when using overlayfs ConditionPathExists=!/run/live/overlay/work [Service] Type=oneshot ExecStart=/lib/apparmor/apparmor.systemd reload ExecReload=/lib/apparmor/apparmor.systemd reload # systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement # from running processes (and not being able to re-apply it later). # Upstream systemd developers refused to implement an option that allows overriding # this behaviour, therefore we have to make ExecStop a no-op to error out on the # safe side. # # If you really want to unload all AppArmor profiles, run aa-teardown ExecStop=/bin/true RemainAfterExit=yes [Install] WantedBy=sysinit.target