The "mr" stuff means _executable_ mmap. I looks like unbound have an executable stack. This should likely be fixed instead of adding "mr" to the abstraction, since it is a larger problem:
# execstack -q /usr/sbin/unbound X /usr/sbin/unbound -- https://code.launchpad.net/~sdeziel/apparmor-profiles/unbound-profile/+merge/86430 Your team AppArmor Developers is requested to review the proposed merge of lp:~sdeziel/apparmor-profiles/unbound-profile into lp:apparmor-profiles. -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
