AppArmor set to be merged for 2.6.36

Maybe I just don't understand but aren't the situations you described some of the things that AppArmor actually does do well? The whole purpose is to add additional access control so that the application can only access the things it needs to run and not every possible thing you as a user might have access to.