4.4.0-20.22 introduced some apparmor updates which broke builds with CONFIG_SECURITYFS=n. This is not a common configuration combination but is exercised by the zfcpdump-kernel package for s390x. Fix the broken declaration in include/linux/security.h. Proposing for the first SRU to yakkety. -apw