Ok, decided to open new thread.... I tried to create a new profile for VLC. I invoked aa-genprof /usr/bin/vlc and played around with VLC. But, when I press enter or (S)can in aa-genprof, nothing happens, a merely empty profile gets created. But, var log messages is full with DENIED messages, thus AppArmor detects how VLC accesses stuff. But aa-genprof seem to be unable to detect these things, it does not work. Then I tried to put the profile into complain mode and again played with VLC. Afterwards tried with aa-logprof to parse for AA messages. Again, it does not work. After I all, neither aa-genprof, nor aa-logprof creates profiles on my machine. I´m on openSUSE 13.1. Any hints on that? I really don´t want to create profiles completely manually....