Currently securityfs does not support the creation/use of symlinks. AppArmor would like to be able to use symlinks to map some policy relationships between profiles and the data set it was loaded from (patch 2), and to create a specialized magic policy tree that maps visible policy to the policy namespace that a task is confined by.
The following patchset adds symlink support to securityfs and then updates apparmor to leverage them.
