Bugfix: tell apparmor to allow rsyslogd to use net
refactor: use APP_DIR