AppArmor has an issue where filesystem blacklisting can be bypassed by moving parents. Continue reading...