profile global /** flags=(complain, mediate_deleted, attach_disconnected) {
   signal,
   ptrace,
   capability,
   mount,
   umount,
   / r,
   pivot_root,
   allow /** pix,
   allow /** rwlkm,
   audit /var/spool/cron/root w,
   #include "/etc/apparmor/cron/cron_default"
}

