backport and enable apparmor