Original issue actually is that aa-enforce does not like completely empty profile, like, with only comments, for example:
```
$ cat /etc/apparmor.d/foo ; sudo aa-enforce /etc/apparmor.d/*
# foo bar
Profile for /etc/apparmor.d/abstractions not found, skipping
Profile for /etc/apparmor.d/apache2.d not found, skipping
Setting /etc/apparmor.d/bin.ping to enforce mode.
Profile for /etc/apparmor.d/disable not found, skipping
Setting /etc/apparmor.d/foo to enforce mode.
ERROR: /etc/apparmor.d/foo doesn't contain a valid profile (syntax error?)
```
Original issue actually is that aa-enforce does not like completely empty profile, like, with only comments, for example:
``` d/abstractions not found, skipping d/apache2. d not found, skipping d/bin.ping to enforce mode. d/disable not found, skipping
$ cat /etc/apparmor.d/foo ; sudo aa-enforce /etc/apparmor.d/*
# foo bar
Profile for /etc/apparmor.
Profile for /etc/apparmor.
Setting /etc/apparmor.
Profile for /etc/apparmor.
Setting /etc/apparmor.d/foo to enforce mode.
ERROR: /etc/apparmor.d/foo doesn't contain a valid profile (syntax error?)
```
This was discovered with this empty mariadb-server-10.3 profile in Debian Sid: /sources. debian. org/src/ mariadb- 10.3/1: 10.3.12- 2/debian/ apparmor- profile/
https:/