In the /etc/apparmor.d directory, you'll see the AppArmor profiles for your system. (SELinux folk say policies, but AppArmor folk say profiles.):
donnie@ubuntu3:/etc/apparmor.d$ ls -ltotal 72drwxr-xr-x 5 root root 4096 Oct 29 15:21 abstractionsdrwxr-xr-x 2 root root 4096 Nov 15 09:34 cachedrwxr-xr-x 2 root root 4096 Oct 29 14:43 disable. . .. . .-rw-r--r-- 1 root root 125 Jun 14 16:15 usr.bin.lxc-start-rw-r--r-- 1 root root 281 May 23 2017 usr.lib.lxd.lxd-bridge-proxy-rw-r--r-- 1 root root 17667 Oct 18 05:04 usr.lib.snapd.snap-confine.real-rw-r--r-- 1 root root 1527 Jan 5 2016 usr.sbin.rsyslogd-rw-r--r-- 1 root root 1469 Sep 8 15:27 usr.sbin.tcpdumpdonnie@ubuntu3:/etc/apparmor.d$
The sbin.dhclient file and the ...