For option 2., IMO the logic should be reversed (for Karmic atleast).
- namei.c should be w/o apparmor.
- aa-namei.c can be with apparmor patch
The offending commit that changes the VFS API is c9b68678c51d435e824214926d41e1ab5e9f7b99 in Jaunty. This commit shouldn't have unconditionally changed the VFS API.
For option 2., IMO the logic should be reversed (for Karmic atleast).
- namei.c should be w/o apparmor.
- aa-namei.c can be with apparmor patch
The offending commit that changes the VFS API is c9b68678c51d435 e824214926d41e1 ab5e9f7b99 in Jaunty. This commit shouldn't have unconditionally changed the VFS API.