(not everything has an AppArmor profile - but the only things without one *with a network port open* are sshd and auditd. The latter is on my TODO list, the former… if openssh has an issue, we're all fucked and nothing I can do will make a difference.)