AppArmor profile installation currently require a lot of manual wokr to install and enable:
override_dh_install:
dh_install
dh_installdirs etc/apparmor.d
cp debian/openntpd.apparmor debian/openntpd/etc/apparmor.d/openntpd
dh_apparmor --profile-name=usr.sbin.openntpd -p openntpd
IMHO, dh-apparmor should automatically install debian/foo.apparmor into /etc/apparmor.d/foo, which would then give us this simplified debian/rules:
override_dh_install:
dh_install
dh_apparmor --profile-name=usr.sbin.openntpd -p openntpd