Apparmor development in devcontainer

[dunxd]

I want to add Apparmor to my app. I am unsure whether Apparmor testing is possible inside the devcontainer.

I have added a minimal apparmor.txt file with complain mode enabled to my app:

#include <tunables/global>

profile ha-cops /init flags=(attach_disconnected,mediate_deleted,complain) {

}

then enabled it by adding apparmor: true to config.yaml. I'm assuming that this would complain about everything if it is working.

When I run sudo journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"' at the terminal within the devcontainer I get -- No entries --. I am assuming this means that apparmor isn't available inside the devcontainer.

Is this something that isn't possible, or could the devcontainer be enabled to support Apparmor?