@serge -- if this is going to be fixed using an apparmour policy should we be flipping the kernel task over to apparmor ?
@serge -- if this is going to be fixed using an apparmour policy should we be flipping the kernel task over to apparmor ?