[Service]
AppArmorProfile=grub-common.service