commit 84fe679b9fd73febfa90d5d1fc89d5c0bb0f8c82
Author: Andreas Hasenack <andreas@canonical.com>
Date:   Mon Jul 31 18:03:18 2017 -0300

      * d/rules: use dh_apparmor to install the apparmor profiles. That will
        insert a call to apparmor_parser in the package's postinst script to
        correctly reload the profile ignoring the existing cache and rebuilding
        it. (LP: #1707400)

diff --git a/debian/rules b/debian/rules
index 9e73b8c..a4835cb 100755
--- a/debian/rules
+++ b/debian/rules
@@ -259,8 +259,8 @@ ifneq (,$(findstring $(DEB_HOST_ARCH_OS), linux))
 	dh_install -p libvirt-bin usr/lib/systemd/system lib/systemd/
 	dh_install -p libvirt-bin usr/lib/libvirt/virt-aa-helper
 	dh_install -p libvirt-bin etc/apparmor.d
-	#dh_apparmor -p libvirt-bin --profile-name=usr.lib.libvirt.virt-aa-helper
-	#dh_apparmor -p libvirt-bin --profile-name=usr.sbin.libvirtd
+	dh_apparmor -p libvirt-bin --profile-name=usr.lib.libvirt.virt-aa-helper
+	dh_apparmor -p libvirt-bin --profile-name=usr.sbin.libvirtd
 	#dh_install -p libvirt-bin usr/share/polkit-1
 	# Not all linux arches have systemtap yet
 	#mkdir -p debian/tmp/usr/share/systemtap