diff --git a/debian/changelog b/debian/changelog
index ef5c54136..a69f0a49d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -52,6 +52,10 @@ linux (4.13.11-1) UNRELEASED; urgency=medium
     Thanks to Andrew Chadwick (Closes: #880504)
   * netfilter: nft_set_hash: disable fast_ops for 2-len keys (Closes: #880145)
 
+  [ Ben Hutchings ]
+  * linux-image: Recommend apparmor, as systemd units with an AppArmor
+    profile will fail without it (Closes: #880441)
+
  -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 04 Nov 2017 09:54:41 +0100
 
 linux (4.13.10-1) unstable; urgency=medium
diff --git a/debian/config/defines b/debian/config/defines
index 6714a8c29..161c53ce9 100644
--- a/debian/config/defines
+++ b/debian/config/defines
@@ -118,6 +118,7 @@ part-long-xen: This kernel also runs on a Xen hypervisor.
 
 [image]
 initramfs-generators: initramfs-tools initramfs-fallback
+recommends: apparmor
 
 [relations]
 # compilers