@John, thank youf or the patch, but maybe I misunderstood it. Applying that patch to Linus’ master branch, should fix the regression, right? No user space change needed, correct?

```
$ git log --oneline -2
4a4a4a7 apparmor: fix regression in network mediation when using feature pinning
6cff0a1 Merge tag 'platform-drivers-x86-v4.14-3' of git://git.infradead.org/linux-platform-drivers-x86
```

With a Linux kernel built from that, NetworkManager still does not work, and even brightness controls don’t work on a Dell XPS 13 9360.

```
$ journalctl -k
[…]
Okt 24 16:54:05 Ixpees kernel: ath10k_pci 0000:3a:00.0: board_file api 2 bmi_id N/A crc32 07ee144e
Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.907:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session" pid=828 comm="apparmor_parse
Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.907:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session//chromium" pid=828 comm="appa
Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=830 comm="apparmor_parser"
Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=830 comm="apparmo
Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=830 comm="apparmor_parse
Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=830 comm="apparmor_par
Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.055:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="webbrowser-app" pid=833 comm="apparmor_parser"
Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.055:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="webbrowser-app//oxide_helper" pid=833 comm="apparmor_parser"
Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.115:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=856 comm="apparmor_parser"
Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.155:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=852 comm="apparmor_parser"
Okt 24 16:54:06 Ixpees kernel: ath10k_pci 0000:3a:00.0: Unknown eventid: 90118
Okt 24 16:54:06 Ixpees kernel: ath10k_pci 0000:3a:00.0: htt-ver 3.32 wmi-op 4 htt-op 3 cal otp max-sta 32 raw 0 hwcrypto 1
[…]
Okt 24 16:54:06 Ixpees kernel: ath: EEPROM regdomain: 0x6c
Okt 24 16:54:06 Ixpees kernel: ath: EEPROM indicates we should expect a direct regpair map
Okt 24 16:54:06 Ixpees kernel: ath: Country alpha2 being used: 00
Okt 24 16:54:06 Ixpees kernel: ath: Regpair used: 0x6c
Okt 24 16:54:06 Ixpees kernel: ath10k_pci 0000:3a:00.0 wlp58s0: renamed from wlan0
Okt 24 16:54:07 Ixpees kernel: Bluetooth: BNEP (Ethernet Emulation) ver 1.3
Okt 24 16:54:07 Ixpees kernel: Bluetooth: BNEP filters: protocol multicast
Okt 24 16:54:07 Ixpees kernel: Bluetooth: BNEP socket layer initialized
Okt 24 16:54:08 Ixpees kernel: IPv6: ADDRCONF(NETDEV_UP): wlp58s0: link is not ready
Okt 24 16:54:08 Ixpees kernel: ath10k_pci 0000:3a:00.0: Unknown eventid: 90118
Okt 24 16:54:08 Ixpees kernel: IPv6: ADDRCONF(NETDEV_UP): wlp58s0: link is not ready
Okt 24 16:54:08 Ixpees kernel: IPv6: ADDRCONF(NETDEV_UP): wlp58s0: link is not ready
Okt 24 16:54:09 Ixpees kernel: Bluetooth: RFCOMM TTY layer initialized
Okt 24 16:54:09 Ixpees kernel: Bluetooth: RFCOMM socket layer initialized
Okt 24 16:54:09 Ixpees kernel: Bluetooth: RFCOMM ver 1.11
Okt 24 16:54:10 Ixpees kernel: kauditd_printk_skb: 35 callbacks suppressed
Okt 24 16:54:10 Ixpees kernel: audit: type=1400 audit(1508856850.963:47): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:11 Ixpees kernel: audit: type=1400 audit(1508856851.963:48): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:12 Ixpees kernel: audit: type=1400 audit(1508856852.963:49): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:13 Ixpees kernel: audit: type=1400 audit(1508856853.963:50): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:14 Ixpees kernel: audit: type=1400 audit(1508856854.963:51): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:15 Ixpees kernel: audit: type=1400 audit(1508856855.963:52): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:16 Ixpees kernel: audit: type=1400 audit(1508856856.963:53): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:17 Ixpees kernel: audit: type=1400 audit(1508856857.963:54): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:18 Ixpees kernel: audit: type=1400 audit(1508856858.963:55): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:19 Ixpees kernel: audit: type=1400 audit(1508856859.963:56): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:20 Ixpees kernel: audit: type=1400 audit(1508856860.963:57): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:21 Ixpees kernel: audit: type=1400 audit(1508856861.963:58): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:22 Ixpees kernel: audit: type=1400 audit(1508856862.963:59): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:23 Ixpees kernel: audit: type=1400 audit(1508856863.963:60): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:24 Ixpees kernel: audit: type=1400 audit(1508856864.963:61): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:25 Ixpees kernel: audit: type=1400 audit(1508856865.963:62): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:26 Ixpees kernel: audit: type=1400 audit(1508856866.967:63): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:27 Ixpees kernel: audit: type=1400 audit(1508856867.967:64): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:28 Ixpees kernel: audit: type=1400 audit(1508856868.967:65): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:29 Ixpees kernel: audit: type=1400 audit(1508856869.967:66): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto
Okt 24 16:54:30 Ixpees kernel: audit: type=1400 audit(1508856870.967:67): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" pro
[…]
Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.387:105): apparmor="DENIED" operation="create" profile="/sbin/dhclient" pid=1930 comm="dhclient" family="unix" sock_type="dgram" protocol=0 reques
Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.391:106): apparmor="DENIED" operation="create" profile="/sbin/dhclient" pid=1930 comm="dhclient" family="unix" sock_type="stream" protocol=0 reque
Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.391:107): apparmor="DENIED" operation="create" profile="/sbin/dhclient" pid=1930 comm="dhclient" family="unix" sock_type="stream" protocol=0 reque
Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.399:108): apparmor="DENIED" operation="create" profile="/usr/lib/NetworkManager/nm-dhcp-helper" pid=1931 comm="nm-dhcp-helper" family="unix" sock_
[…]
```