* live-build/ubuntu-core/hooks/90_pecompile-apparmor.chroot:

- generate /etc/apparmod.d/cache files during image build to
    avoid out-of-sync issue with profiles and cache (LP: #1460152)

debian/changelog

@@ -1,3 +1,11 @@
+livecd-rootfs (2.307) UNRELEASED; urgency=low
+
+  * live-build/ubuntu-core/hooks/90_pecompile-apparmor.chroot:
+    - generate /etc/apparmod.d/cache files during image build to
+      avoid out-of-sync issue with profiles and cache (LP: #1460152)
+
+ -- Michael Vogt <michael.vogt@ubuntu.com>  Mon, 01 Jun 2015 12:53:22 +0200
+
 livecd-rootfs (2.306) wily; urgency=medium
 
   * Create hooks and image build config for the ubuntu-desktop-next

live-build/ubuntu-core/hooks/90_precompile-apparmor.chroot

@@ -0,0 +1,13 @@
+#!/bin/sh
+#
+# similar to
+#   live-build/ubuntu-touch/hooks/90-precompile-apparmor-policies.chroot 
+# but we only care about the system apparmor (see LP: #1460152)
+
+set -e
+
+FEATURES=/var/cache/apparmor/.features
+
+echo "I: precompiling deb apparmor policies"
+/sbin/apparmor_parser -M ${FEATURES} -Q --write-cache --cache-loc=/etc/apparmor.d/cache/ $(find /etc/apparmor.d/ -maxdepth 1 -type f -not -path '*/\.*')
+