My first "bug report" so please be gentle, as I'm not even sure is this the right place to post what and where... Please advice for any failures regarding this report so I know better next time.
When using apparmor sshd profile from /usr/share/apparmor/extra-profiles/usr.sbin.sshd it cannot be enabled
apparmor_parser -r /etc/apparmor.d/local/usr.sbin.sshd.broken
AppArmor parser error for /etc/apparmor.d/local/usr.sbin.sshd.broken in /etc/apparmor.d/tunables/home at line 16: syntax error, unexpected TOK_EQUALS, expecting TOK_MODE
There seems to be one hash more in one line at the same profile file taken from debian testing pkg:
https://debian.pkgs.org/10/debian-main-amd64/apparmor-profiles_2.13.2-9_all.deb.html
diff ./Downloads/usr.sbin.sshd /usr/share/apparmor/extra-profiles/usr.sbin.sshd 143c143 < ## include <local/usr.sbin.sshd> --- > #include <local/usr.sbin.sshd>
That Debian buster file works normally
apparmor_status |grep sshd
/usr/sbin/sshd /usr/sbin/sshd//passwd
So maybe the package/profiles needs updating?