I'm fiddling around with AppArmor on Ubuntu 24.04.1 and wanted to see how my system behaves when it's totally disabled, so I did so as described here:
sudo systemctl stop apparmor
sudo systemctl disable apparmor
After this apparmor_status still said apparmor module is loaded. I rebooted, and it still said that, even though apparmor doesn't appear in lsmod. Systemd says:
❯❯ sudo systemctl status apparmor
○ apparmor.service - Load AppArmor profiles
Loaded: loaded (/usr/lib/systemd/system/apparmor.service; disabled; preset: enabled)
Active: inactive (dead)
Docs: man:apparmor(7)
https://gitlab.com/apparmor/apparmor/wikis/home/