(AppArmor)[https://apparmor.net/] is an intergral part of our upstream OS security, we should formalise our requirement by way of a new systemd service; akin to how snapd does this.

Proposed new service rockstor-apparmor.service

This issue is likely related to, i.e. has a dependency on:

• Avoid system calls to interact with systemd services Avoid system calls to interact with systemd services #2680

which we may have to grant sufficient privileges/AppArmor exceptions to.