AppArmor: Allow to read ca-certificates.crt

Reviewed-by: Emanuele Aina <emanuele.aina@collabora.co.uk>
Reviewed-by: Simon McVittie <simon.mcvittie@collabora.co.uk>
Signed-off-by: Justin Kim <justin.kim@collabora.com>
Differential Revision: https://phabricator.apertis.org/D6865

apparmor.d/abstractions/chaiwala-base

@@ -89,3 +89,5 @@
   # All app-bundles are expected to be able to read *public system extensions*
   # (for example themes) copied or bind-mounted into this location.
   /var/lib/apertis_extensions/public/{,**} r,
+
+  /etc/ssl/certs/ca-certificates.crt r,