This setting controls the behavior of the AppArmor initscript if it cannot successfully load the AppArmor kernel module on startup. The four possible settings are:
- Log a failure message (the default behavior).
- Attempt to build the AppArmor module against the currently running kernel. If the compilation is successful, the module will be loaded and AppArmor started; if the compilation fails, a failure message is logged.
- Log a failure message and drop to runlevel 1 (single user).
- Attempt to build the module against the running kernel (like build) and if the compilation fails, drop to runlevel 1 (single user).
If you find any additional bugs, please report them at <https://bugs.launchpad.net/apparmor/+filebug>.