From the patch:
> +++ b/contrib/apparmor/usr.bin.pasta
> + ptrace,
Just wondering - does pasta really need to trace everything, and be traced by
everything - or could you make the rule more specific?
If you are unsure, please show the audit.log events for ptrace.