Comment 6 for bug 1460152

I looked into this some more as I was confused why this works on the distro. And it turns out that the dh_apparmor cache re-generates the cache on install time.

I would really prefer if apparmor could handle this differently, I attach a (ugly) proof of concept patch with what I have in mind. My idea is to sync the mtime of cache and profile to ensure its always re-generated when they are out-of-sync. Ideally this would be part of the apparmor cache header I think.