Comment # 1 on bug 1069906 from John Johansen

AppArmor is probably not finding a binary cache of policy so it is trying to
compile policy.

This can be disabled in two ways.
1. provide a binary cache file matching the kernel
2. Disable writing the cache file, and the compile if needed will only go to
the kernel and not be cached for further boots. This can be done by editing the
/etc/apparmor/parser.conf and commenting out the line that has

write-cache

Note: doing 2 will potentially slow down boot as if a cache file is not found
policy will be recompiled on every boot.