In the /etc/apparmor.d directory, you'll see the AppArmor profiles for your system. (The SELinux folk say policies, but the AppArmor folk say profiles.):
donnie@ubuntu3:/etc/apparmor.d$ ls -l total 72 drwxr-xr-x 5 root root 4096 Oct 29 15:21 abstractions drwxr-xr-x 2 root root 4096 Nov 15 09:34 cache drwxr-xr-x 2 root root 4096 Oct 29 14:43 disable drwxr-xr-x 2 root root 4096 Apr 5 2016 force-complain drwxr-xr-x 2 root root 4096 Oct 29 15:21 local drwxr-xr-x 2 root root 4096 Oct 29 15:02 lxc -rw-r--r-- 1 root root 198 Jun 14 16:15 lxc-containers -rw-r--r-- 1 root root 3310 Apr 12 2016 sbin.dhclient drwxr-xr-x 5 root root 4096 Oct 29 15:21 tunables -rw-r--r-- 1 root root 125 Jun 14 16:15 usr.bin.lxc-start -rw-r--r-- 1 root root 281 May 23 2017 usr.lib.lxd.lxd-bridge-proxy -rw-r--r-- 1 root root 17667 Oct 18 05:04 usr.lib.snapd.snap-confine.real -rw-r--r-- 1 root root 1527 Jan 5 2016 usr.sbin.rsyslogd -rw-r--r-- 1 root root 1469 Sep 8 15...
