Comment 4 for bug 1995707

Thanks Sergio - from a quick look at the debdiff (I have attached it for easier review by others) my initial feedback would be to use the aa_gettaskcon() function from libapparmor to get the label of the client rather than manually parsing /proc/PID/attr/apparmor/current. But otherwise this looks pretty good I think.