Comment 11 for bug 2058133

Reproduced in Bionic:

--->
% canonical-livepatch
snap-confine has elevated permissions and is not confined but should be. [...]
% systemctl status snapd-apparmor
[...]
Mär 22 10:58:04 snapd-apparmor[3198]: Failed to load policy-features from '/etc/apparmor.d/abi/kernel-5.4-outoftree-network': No such file or directory
<---

So I guess the whole story is: /etc/apparmor.d/abi/kernel-5.4-outoftree-network is missing, which is causing snapd-apparmor to fail, which is causing Livepatch to fail, which is causing 'ua security-status' to fail, which is causing update-manager to fail.