Can you comment why this is needed: capability dac_override, I added a note in the profile in the meantime. -- https://code.launchpad.net/~sdeziel/apparmor-profiles/unbound-profile/+merge/83842 Your team AppArmor Developers is subscribed to branch lp:apparmor-profiles.