Ubuntu packages don't seem to disable mysqld AppArmor profile properly

[ayurchen]

As per instructions at https://help.ubuntu.com/community/AppArmor, in order to disable profile, after it's been linked to /etc/apparmor.d/disable/ one also need to run

apparmor_parser -R /etc/apparmor.d/profile.name

What we seem to have in DEBIAN/postinstis

                if aa-status --enabled 2>/dev/null; then
                        apparmor_parser -r -T -W /etc/apparmor.d/usr.sbin.mysqld 2>/dev/null || true
                fi

which apparently is not enough (maybe it is not invoked, may be it is the difference in command line options) and host reboot is needed (EC2, official Ubuntu 1804 image) to actually disable the profile. Running apparmor_parser -R solves the issue.