Comment # 4 on bug 1069906 from Thorsten Kukuk

Ok, neither the requirements of having /var/lib/apparmor nor adding
/var/lib/apparmor as dependency helps: both are fullfilled after we leave the
initrd, so systemd starts apparmor, and then unmounts this filesystems.


So I only see two solutions left:
- make apparmor depending on local-fs.target, but this has the disadvantage,
that apparmor is started very late in the boot process
- split apparmor: load the profiles without creating a cache if that does not
exist, and create the cache later for the next reboot. Advantage: we can start
apparmor really as one of the first services.

Maybe there are more solutions, but I don't know any.