Comment 5 for bug 1979879

The other argument I have against fixing this in apparmor, is that this fix is for jammy only. It's not present in kinetic. But the samba fix (correct path for that binary) is in jammy.

Then the question boils down to which update will cause the less amount of disruption for users...

a) apparmor: apparmor restart (reload all profiles), even for users who are not using samba services
b) samba: if only the libs are installed, maybe needrestart will ask for some restarts? If daemons are installed, then the usual samba restart, even for users who are not using the apparmor profile.