fix apparmor profile against symlinked folder