sergiusens@mirkwood:~$ keepassxc
snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks
sergiusens@mirkwood:~$ aa-enabled 
Yes
sergiusens@mirkwood:~$ aa-status 
apparmor module is loaded.
You do not have enough privilege to read the profile set.
sergiusens@mirkwood:~$ sudo aa-status 
[sudo] password for sergiusens: 
apparmor module is loaded.
26 profiles are loaded.
25 profiles are in enforce mode.
   /sbin/dhclient
   /usr/bin/evince
   /usr/bin/evince-previewer
   /usr/bin/evince-previewer//sanitized_helper
   /usr/bin/evince-thumbnailer
   /usr/bin/evince-thumbnailer//sanitized_helper
   /usr/bin/evince//sanitized_helper
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/lib/cups/backend/cups-pdf
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/sbin/cups-browsed
   /usr/sbin/cupsd
   /usr/sbin/cupsd//third_party
   /usr/sbin/ippusbxd
   /usr/sbin/tcpdump
   libreoffice-oopslash
   libreoffice-senddoc
   libreoffice-soffice
   libreoffice-xpdfimport
   snap.core.hook.configure
   snap.keepassxc.cli
   snap.keepassxc.keepassxc
1 profiles are in complain mode.
   snap.vscode.vscode
4 processes have profiles defined.
4 processes are in enforce mode.
   /sbin/dhclient (1083) 
   /usr/sbin/cups-browsed (686) 
   /usr/sbin/cupsd (621) 
   /usr/sbin/cupsd (1118) 
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.