Handle apparmor for Debian 11 when parser not present

Signed-off-by: Derek Nola <derek.nola@suse.com>

roles/prereq/tasks/main.yml

@@ -129,7 +129,7 @@
   register: apparmor_status
   changed_when: false
 
-- name: Install Apparmor Parser
+- name: Install Apparmor Parser [Suse]
   when:
     - apparmor_status.stdout == "Y"
     - ansible_os_family == 'Suse'
@@ -137,6 +137,15 @@
     name: apparmor-parser
     state: present
 
+- name: Install Apparmor Parser [Debian]
+  when:
+    - apparmor_status.stdout == "Y"
+    - ansible_distribution == 'Debian'
+    - ansible_facts['distribution_major_version'] == "11"
+  ansible.builtin.package:
+    name: apparmor
+    state: present
+
 - name: Add /usr/local/bin to sudo secure_path
   ansible.builtin.lineinfile:
     line: 'Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin'