/etc/apparmor.d/tunables/ is in apparmor-profiles-extra 1.6ubuntu1.
This file is owned by root:root, with mode 0o755.