John - I skipped commit be79d7fa43f91c22e0e140c06aad57e9e5f417b2
('apparmor: fix change_hat not finding hat after policy replacement')
from stable v4.4.36 since it looks like the code in Xenial already has
this patch, albeit in a different form. Please confirm.
rtg
--
Tim Gardner tim.gardner at canonical.com