FM / sysinit.target.wants

/snap/core18/3084/lib/systemd/system/sysinit.target.wants/

/snap/core18/3084/lib/systemd/system/sysinit.target.wants

Name	Size	Mode	Actions
apparmor.service	1162	0644	edit dl rm
cryptsetup.target	412	0644	edit dl rm
dev-hugepages.mount	750	0644	edit dl rm
dev-mqueue.mount	665	0644	edit dl rm
finalrd.service	396	0644	edit dl rm
kmod-static-nodes.service	717	0644	edit dl rm
proc-sys-fs-binfmt_misc.automount	745	0644	edit dl rm
sys-fs-fuse-connections.mount	795	0644	edit dl rm
sys-kernel-config.mount	767	0644	edit dl rm
sys-kernel-debug.mount	710	0644	edit dl rm
systemd-ask-password-console.path	704	0644	edit dl rm
systemd-binfmt.service	999	0644	edit dl rm
systemd-hwdb-update.service	818	0644	edit dl rm
systemd-journal-flush.service	771	0644	edit dl rm
systemd-journald.service	1614	0644	edit dl rm
systemd-machine-id-commit.service	733	0644	edit dl rm
systemd-modules-load.service	1007	0644	edit dl rm
systemd-random-seed.service	792	0644	edit dl rm
systemd-sysctl.service	693	0644	edit dl rm
systemd-timesyncd.service	1484	0644	edit dl rm
systemd-tmpfiles-setup-dev.service	764	0644	edit dl rm
systemd-tmpfiles-setup.service	744	0644	edit dl rm
systemd-udev-trigger.service	755	0644	edit dl rm
systemd-udevd.service	1006	0644	edit dl rm
systemd-update-utmp.service	794	0644	edit dl rm

Edit: /usr/lib/systemd/system/apparmor.service (1162B)

# Don't start this unit on the Ubuntu Live CD
ConditionPathExists=!/rofs/etc/apparmor.d

# Don't start this unit on the Debian Live CD when using overlayfs
ConditionPathExists=!/run/live/overlay/work

[Service]
Type=oneshot
ExecStart=/lib/apparmor/apparmor.systemd reload
ExecReload=/lib/apparmor/apparmor.systemd reload

# systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement
# from running processes (and not being able to re-apply it later).
# Upstream systemd developers refused to implement an option that allows overriding
# this behaviour, therefore we have to make ExecStop a no-op to error out on the
# safe side.
#
# If you really want to unload all AppArmor profiles, run   aa-teardown
ExecStop=/bin/true
RemainAfterExit=yes

[Install]
WantedBy=sysinit.target

[Unit] Description=Load AppArmor profiles DefaultDependencies=no Before=sysinit.target After=local-fs.target After=systemd-journald-audit.socket RequiresMountsFor=/var/cache/apparmor AssertPathIsReadWrite=/sys/kernel/security/apparmor/.load ConditionSecurity=apparmor Documentation=man:apparmor(7) Documentation=https://gitlab.com/apparmor/apparmor/wikis/home/ # Don't start this unit on the Ubuntu Live CD ConditionPathExists=!/rofs/etc/apparmor.d # Don't start this unit on the Debian Live CD when using overlayfs ConditionPathExists=!/run/live/overlay/work [Service] Type=oneshot ExecStart=/lib/apparmor/apparmor.systemd reload ExecReload=/lib/apparmor/apparmor.systemd reload # systemd maps 'restart' to 'stop; start' which means removing AppArmor confinement # from running processes (and not being able to re-apply it later). # Upstream systemd developers refused to implement an option that allows overriding # this behaviour, therefore we have to make ExecStop a no-op to error out on the # safe side. # # If you really want to unload all AppArmor profiles, run aa-teardown ExecStop=/bin/true RemainAfterExit=yes [Install] WantedBy=sysinit.target