The text a25cad1cbfcc, as Debian 8 (Jessie) shipped it.
set an AppArmor security profile to complain mode.
aa-complain(8) on Linux now