I want all the AppArmor profiles activated wherever applicable permanently, how can I do that?
To permanently put all profiles into enforce mode:
sudo aa-enforce /etc/apparmor.d/*
To permanently put all profiles into complain mode:
sudo aa-complain /etc/apparmor.d/*
To verify the current status of apparmor:
complain mode will log violations against the application profiles, whereas enforce mode will strictly enforce the application profiles.