Comment # 14 on bug 1017260 from Christian Boltz

Maintenance team, any idea why the preset isn't honored, and what I need to do
to get AppArmor re-enabled for everybody? (Probably another update, but - would
adding "systemctl enable apparmor.service" in %post be acceptable?)

If you don't know yourself, please ask someone with systemd knownledge.