apparmor_parser cannot create cache files on non-karmic kernels

Binary package hint: apparmor

Using a karmic userspace with a kernel from an older release (Jaunty and Intrepid were tested), apparmor_parser cannot create the cache files and load a profile.

TEST CASE:
1. install linux-image-2.6.27-14-generic on an up to date karmic
2. reboot into this kernel
3. /etc/init.d/apparmor force-reload

At this point you should see something like the following:
/sbin/apparmor_parser: Unable to replace "/sbin/dhclient3". Profile doesn't conform to protocol
/sbin/apparmor_parser: Unable to replace "/usr/share/gdm/guest-session/Xsession". Profile doesn't conform to protocol
/sbin/apparmor_parser: Unable to replace "/usr/sbin/tcpdump". Profile doesn't conform to protocol
/sbin/apparmor_parser: Unable to replace "/usr/sbin/dhcpd3". Profile doesn't conform to protocol
/sbin/apparmor_parser: Unable to replace "/usr/lib/cups/backend/cups-pdf". Profile doesn't conform to protocol

If the cache files do exist (ie created when on a karmic kernel), they are loaded (because they don't need to be regenerated) just fine, but updating a profile and using apparmor_parser on it results in the error message. While not a supported configuration, this is a regression over previous versions of apparmor (and can hinder development in a variety of ways).

ProblemType: Bug
ApparmorStatusOutput:
 Error: command /usr/sbin/apparmor_status failed with exit code 4: You do not have enough privilege to read the profile set.
 apparmor module is loaded.
Architecture: amd64
Date: Wed Aug 12 09:13:44 2009
DistroRelease: Ubuntu 9.10
Package: apparmor 2.3.1+1403-0ubuntu9
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-5.24-generic
SourcePackage: apparmor
Uname: Linux 2.6.31-5-generic x86_64