Comment 10 for bug 375422

without adding security=apparmor, the result is:

oem@oem-desktop:~$ sudo aa-status
apparmor module is loaded.
apparmor filesystem is not mounted.

So, the fix is partial