[apparmor] apparmor cache dir error messages

[mailinglisten at posteo.de]

Am 17.05.21 um 23:50 schrieb Christian Boltz:


>>(...)
> In theory the packaged pre-compiled cache should match the kernel so 
> that the directory actually gets used. Your error message indicates that 
> there is a mismatch - did you install a non-default kernel?
> (And BTW, which distribution do you use?)

opensuse leap 15.2 and actually I do use a non default kernel

> The directory is probably part of a package you've installed [1], 
> therefore I'd recommend to keep it. (Deleting it won't break AppArmor, 
> but your package manager might start to complain about the missing 
> files.)

I would expect a cache directory below /var and actually there is also a
cache dir, /var/lib/apparmor/cache/ that contains just a hidden filed
named .features.

What is the benefit of a pre-compiled cache in contrast to the profiles
in /etc/apparmor.d/?

Thanks!