Copying from Eucalyptus, and given my changes in the linked branch here, maas packaging will write a file in /etc/apparmor.d/dhcp.d/maas with content like:
# Maas
/{,var/}run/maas/net/ r,
/{,var/}run/maas/net/** r,
/{,var/}run/maas/net/*.pid lrw,
/{,var/}run/maas/net/*.leases* lrw,
/{,var/}run/maas/net/*.trace lrw,
Copying from Eucalyptus, and given my changes in the linked branch here, maas packaging will write a file in /etc/apparmor. d/dhcp. d/maas with content like: }run/maas/ net/ r, }run/maas/ net/** r, }run/maas/ net/*.pid lrw, }run/maas/ net/*.leases* lrw, }run/maas/ net/*.trace lrw,
# Maas
/{,var/
/{,var/
/{,var/
/{,var/
/{,var/
(or whatever seems reasonable for maas).