[Unit]
Description=Load AppArmor profiles
DefaultDependencies=no
Before=sysinit.target
After=systemd-journald-audit.socket
After=var.mount var-lib.mount
ConditionSecurity=apparmor

[Service]
Type=oneshot
ExecStart=/lib/apparmor/apparmor.systemd start
ExecReload=/lib/apparmor/apparmor.systemd reload
ExecStop=/lib/apparmor/apparmor.systemd stop
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target