fix apparmour to allow lscpu