AppArmor policies can be few hundred lines. Do people write these from scratch, or there is a repository for good policies?

Couldn’t package managers install and enforce such policies?