aa-status doesn't display profile attachment

profile /foo /bar { }

is a totally valid profile, but it's also (at least) confusing for an admin looking at aa-status, and might lead to a false sense of security.

aa-status should {additionally,only} read /sys/kernel/security/apparmor/policy/profiles/*/{name,mode,attach} which is available with newer kernels and parser versions. However SLE or Ubuntu LTS might still contain older kernels that only have /sys/kernel/security/apparmor/profiles.

I didn't check aa-unconfined, but expect the same issue there.