http://pastebin.com/srY0peP9
Above is my .config however I'm now using 3.14.6 with the latest Grsecurity patch.
I can reboot to my 3.5 kernel and aa-logprof will return results for access denials. With the grsecurity kernel thi sis not the case. It's been this way for a while but I haven't remembered to report it.