AppArmor writes past a profile-name list when a process sets its own confinement

9f1e40193eef (Hyunwoo Kim) landed via the same 8fefe68784ae merge (apparmor-pr-2026-08-26, Aug 10). One file, security/apparmor/include/label.h. An unprivileged process reaches the parse by writing /proc/self/attr/apparmor/current or through lsm_set_self_attr, before the change-profile check. The world-writable securityfs .access file does no permission check. Every component has to match a loaded profile. Fixes: f1bd904175e8. Cc: stable. No public CVE.

Not a recast of 6deb7ec9.