Add 'if exists' to some include.

apparmor.d/groups/apt/usr.sbin.apt-cacher-ng

@@ -4,13 +4,13 @@
 
 @{APT_CACHER_NG_CACHE_DIR}=/var/cache/apt-cacher-ng
 
-#include <tunables/global>
+include <tunables/global>
 
-profile apt-cacher-ng /usr/sbin/apt-cacher-ng {
-  #include <abstractions/base>
-  #include <abstractions/nameservice>
-  #include <abstractions/openssl>
-  #include <abstractions/user-tmp>
+profile apt-cacher-ng /usr/sbin/apt-cacher-ng flags=(complain) {
+  include <abstractions/base>
+  include <abstractions/nameservice>
+  include <abstractions/openssl>
+  include <abstractions/user-tmp>
 
   /etc/apt-cacher-ng/ r,
   /etc/apt-cacher-ng/** r,
@@ -35,6 +35,5 @@ profile apt-cacher-ng /usr/sbin/apt-cacher-ng {
   # used by libevent
   @{PROC}/sys/kernel/random/uuid r,
 
-  # Site-specific additions and overrides. See local/README for details.
-  #include <local/usr.sbin.apt-cacher-ng>
+  include if exists <local/usr.sbin.apt-cacher-ng>
 }

apparmor.d/groups/browsers/torbrowser.Browser.firefox

@@ -148,5 +148,5 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
   # Yubikey NEO also needs this:
   /sys/devices/**/hidraw/hidraw*/uevent r,
 
-  include <local/torbrowser.Browser.firefox>
+  include if exists <local/torbrowser.Browser.firefox>
 }

apparmor.d/groups/browsers/torbrowser.Browser.plugin-container

@@ -100,5 +100,5 @@ profile torbrowser_plugin_container {
   deny /etc/pulse/client.conf r,
   deny /usr/bin/pulseaudio x,
 
-  include <local/torbrowser.Browser.plugin-container>
+  include if exists <local/torbrowser.Browser.plugin-container>
 }

apparmor.d/groups/browsers/torbrowser.Tor.tor

@@ -42,5 +42,5 @@ profile torbrowser_tor @{torbrowser_tor_executable} {
   # OnionShare compatibility
   /tmp/onionshare/** rw,
 
-  include <local/torbrowser.Tor.tor>
+  include if exists <local/torbrowser.Tor.tor>
 }