After the Trixie update to 4.4.3-P1-7, apparmor does not start due to
a configuration error
Apr 29 10:51:21 onecom001 systemd[1]: Starting apparmor.service - Load
AppArmor profiles...
Apr 29 10:51:21 onecom001 apparmor.systemd[697]: Restarting AppArmor
Apr 29 10:51:21 onecom001 apparmor.systemd[697]: Reloading AppArmor profiles
Apr 29 10:51:21 onecom001 apparmor.systemd[816]: AppArmor parser error
for /etc/apparmor.d in profile /etc/apparmor.d/usr.sbin.dhclient at
line 76: Could not open 'local/sbin.dhclient'
Apr 29 10:51:21 onecom001 apparmor.systemd[697]: Error: At least one
profile failed to load
Apr 29 10:51:21 onecom001 systemd[1]: apparmor.service: Main process
exited, code=exited, status=1/FAILURE
Apr 29 10:51:21 onecom001 systemd[1]: apparmor.service: Failed with
result 'exit-code'.
Apr 29 10:51:21 onecom001 systemd[1]: Failed to start apparmor.service
- Load AppArmor profiles.

This file (/etc/apparmor.d/usr.sbin.dhclient) was not present in 4.4.3-P1-5+b1

It fails on including a file that is not there, touching it is enough:

$ sudo touch /etc/apparmor.d/local/sbin.dhclient

Control: forcemerge 1103503 1104344
[...]

Let's track this in https://bugs.debian.org/1103503

Best regards

Alexander Kurtz

We believe that the bug you reported is fixed in the latest version of
isc-dhcp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1103503@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexander Kurtz <alexander@kurtz.be> (supplier of updated isc-dhcp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 03 May 2025 19:16:14 +0200
Source: isc-dhcp
Architecture: source
Version: 4.4.3-P1-8
Distribution: unstable
Urgency: medium
Maintainer: Debian ISC DHCP Maintainers <isc-dhcp@packages.debian.org>
Changed-By: Alexander Kurtz <alexander@kurtz.be>
Closes: 1103503
Changes:
 isc-dhcp (4.4.3-P1-8) unstable; urgency=medium
 .
   * Rename /etc/apparmor.d/local/sbin.dhclient conffile (Closes: #1103503)
Checksums-Sha1:
 6cacf4740d72d5878e08622980320fca90fcb5ad 2863 isc-dhcp_4.4.3-P1-8.dsc
 3f27c0d05b585b97c2440477221830c8c311667a 105604 isc-dhcp_4.4.3-P1-8.debian.tar.xz
 d5253897f58a187fae348e114a3f7d78005db37f 10629 isc-dhcp_4.4.3-P1-8_arm64.buildinfo
Checksums-Sha256:
 8f11305d0d978e60114f596615b2cd605004802bb42587a95bf0806211880723 2863 isc-dhcp_4.4.3-P1-8.dsc
 94a64c7cb2749e1f911fcafde72fdbac0d5676dae3b4c85eb1231e65c5973e0d 105604 isc-dhcp_4.4.3-P1-8.debian.tar.xz
 6ee54baba2fcc1047ed37daecb4696738e50b429ecfe5808bc216fe7d79fc967 10629 isc-dhcp_4.4.3-P1-8_arm64.buildinfo
Files:
 56bdd68eeeb8d1ab760eae31bff40382 2863 net important isc-dhcp_4.4.3-P1-8.dsc
 02d24eca1aa653789dd33b93eaa80d5c 105604 net important isc-dhcp_4.4.3-P1-8.debian.tar.xz
 9d79070a2e803729b7fd7f1cba9f8669 10629 net important isc-dhcp_4.4.3-P1-8_arm64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=Rklt
-----END PGP SIGNATURE-----