ToffeeYogurtPots wrote:

The "linux-libre-hardened" kernel does not have the AppArmor module. This means that you can either choose to have a hardened kernel or a kernel with AppArmor support. Might it be possible to combine the two or provide a version of "linux-libre-hardened" with support for AppArmor? Or are the two entirely incompatible? Putting this as a packaging request in case it actually is possible.

I would like such a request as well. Though until that happens I wonder which is better...

I thought the same. Right now I chose to just stick with the hardened kernel since I was a grsec user until they "passed the baton". I figured that, between the two, the kernel would be the most important thing to harden. In the meantime there are a couple of hardened packages.

Might be worth installing the AppArmor kernel just to configure and test AppArmor in case this is feature is added.

Following this update, this request/issue can be closed:

https://www.parabola.nu/news/kernels-deprecation/