Hi, For those watching this bug: John has prepared backports in his tree, with both approaches:
https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git/log/?h=debian-two-patch-1780227 and https://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor.git/log/?h=debian-backport-1780227 (but with the open question which one will be submitted for stable. >From upstream stable point of view probably the two patch backport approach would be the preferred one). Regards, Salvatore