(In reply to Wnereiz Z from comment #15) > > To fix this, run the following at the end of the aa_autodep and aa_genprof > > tests: > > echo '/usr/sbin/nscd {}' | apparmor_parser -R > > to unload the "/usr/sbin/nscd" profile. > > Expected result: no output, $? == 0 > > Thanks for the tips. I wasn't considered the loaded profile will implicate > the profile generated in another profile directory by aa-genprof. I'm going > to check. Quick explanation: Not unloading the profile (when deleting it on disk) didn't hurt as long as the shipped profile was named "/usr/sbin/nscd" - that's exactly the name aa-genprof and aa-autodep use. Therefore the deleted-on-disk profile was replaced with the new profile, but the end result "/usr/sbin/nscd profile loaded" was the same. With the named profiles ("nscd") we now have a different profile name, which made the missing profile unload visible.