dac_override and chown seem to be necessary to create/chown /var/run/unbound.pid. -- https://code.launchpad.net/~sdeziel/apparmor-profiles/unbound-profile/+merge/83892 Your team AppArmor Developers is subscribed to branch lp:apparmor-profiles.