> After latest upgrade I've discovered via `aa-status` that new named profile
> `nvidia_modrpobe` is loaded in complain mode:
Good catch!
That's because debian/rules does this:
# set all profiles in apparmor-profiles to complain mode
cd $(CURDIR)/debian/tmp && sh
$(CURDIR)/debian/put-all-profiles-in-complain-mode.sh
… which unfortunately, now that the apparmor binary package ships its
first profile (previously it only shipped abstractions), sets it to
complain mode.
I'll try to prepare a fix ASAP unless you tell me you're on it.