OK - with some help from a colleague we have this working now... into the 'armbian/userpatches' folder, I copied 'linux-sun8i-default.config' and 'linux-sun8i-dev.config' (from armbian/lib/config/kernel/) then added the following to the end of the file: #!dh CONFIG_SECURITY=y CONFIG_SECURITYFS=y CONFIG_SECURITY_APPARMOR=y CONFIG_SECURITY_APPARMOR_BOOTPARAM_VALUE=1 CONFIG_DEFAULT_SECURITY_APPARMOR=y CONFIG_DEFAULT_SECURITY="apparmor" CONFIG_SECCOMP=y CONFIG_SECCOMP_FILTER=y #!dh (not sure this is exactly how it's supposed to be done - but the result was good...) ...
I recently have been trying to enable SNAPD (SNAPPY) on 16.04 MATE and server. sudo apt install snapd installs fine, but when I try install a 'snap' it fails. this should work on 16.04. sudo snap install hello-world large error dump --- very misleading... When I checked to see what is going on with required apparmor module, I found it wasn't working. When I checked the kernel I found to my surprise that apparmor wasn't enabled. This has been enabled by default on Ubuntu for many, many years... It would appear that several kernel flags need to be set in order for ap