Release apparmor version 3.0.8-3+apertis0

Signed-off-by: Ritesh Raj Sarraf <ritesh.sarraf@collabora.com>
Signed-off-by: Walter Lozano <walter.lozano@collabora.com>
Signed-off-by: Dylan Aïssi <dylan.aissi@collabora.com>

debian/changelog

+apparmor (3.0.8-3+apertis0) apertis; urgency=medium
+
+  [ Ritesh Raj Sarraf ]
+  * Sync from Debian Bookworm. Remaining apertis changes:
+  * Refresh the automatically detected licensing information
+  * Remaining apertis changes:
+    - Rebase below mentioned patches
+      - debian/patches/Allow-for-access-to-the-mutter-shared-keymap.patch
+      - debian/patches/Extend-abstractions-X-to-account-for-Wayland-clients.patch
+      - debian/patches/abstractions-base-stop-working-around-LP-359338.patch
+    - Refresh all patches, as part of rebase
+
+  [ Walter Lozano ]
+    - Disable lto optimization
+    - Disable installation of syscall tests
+    - Move Apertis patches to its own folder
+
+  [ Dylan Aïssi ]
+    - debian/control: Forward port remaining apparmor changes from Apertis.
+      - New binary packages: apparmor-tests, apparmor-utils-tests.
+        The test scripts are not packaged by Debian which are used by our
+        automated tests.
+    - debian/control: Depend on libdbus-1-dev to build the dbus test programs.
+    - debian/features: Pin features to the ones provided by Apertis kernels.
+    - debian/rules: Add `-Xsyscall_ioperm -Xsyscall_iop` to dh_install in
+      override_dh_install-arch to exclude those test programs on
+      architectures other than i386 and amd64.
+  * Dropped apertis changes:
+    - debian/apparmor.postinst: Don't use mv -n, it's only part of newer
+      coreutils.
+      - Now, we use rust-coreutils which supports mv -n.
+    - debian/control: Move aa-status into a separate package.
+      - That was required to avoid pulling python as dependency in our minimal
+        containers because aa-status was in python, but now it is in C.
+
+ -- Dylan Aïssi <dylan.aissi@collabora.com>  Tue, 02 May 2023 12:25:00 +0200
+
 apparmor (3.0.8-3) unstable; urgency=medium
 
   * Cherry-pick a few small, targeted fixes from upstream 3.0 branch