Whenever Debian needs to apply patches to AppArmor profiles, they become hard to maintain on the long term. It also makes it harder to go into the direction of having a cross-distribution maintenance and platform for AppArmor profiles.
If you have patched or want to patch AppArmor profiles in Debian, please consider that we should always keep our delta with upstream low. This goes for AppArmor profiles which are developed upstream as well as for software which ships its own AppArmor profiles.
Read how to contribute upstream.
Read how to debug profiles.
Inform the Debian AppArmor Packaging team
When creating a new profile, we encourage you to report a bug with the "merge-to-upstream" usertag to the Debian BTS, in order to inform the Debian AppArmor Packaging Team.