But apparmor is more complex system and in fact is an RBAC. unveil(2) is much more easier in implementation and enforcing.