Add AppArmor rules

Signed-off-by: Frédéric Danis <frederic.danis@collabora.com>

debian/apparmor.d/usr.libexec.geoclue

+#include <tunables/global>
+
+/usr/libexec/geoclue {
+  #include <abstractions/chaiwala-base>
+  #include <abstractions/dbus-strict>
+
+  dbus send
+       bus=system
+       path=/org/freedesktop/DBus
+       interface=org.freedesktop.DBus
+       member={RequestName,ReleaseName}
+       peer=(name=org.freedesktop.DBus),
+  dbus bind bus=system name=org.freedesktop.GeoClue2,
+  dbus (send, receive) bus=system peer=(label=unconfined),
+  dbus (send, receive) bus=system peer=(label=avahi-daemon),
+
+  network netlink,
+  network inet,
+  network inet6,
+
+  /etc/gai.conf            r,
+  /etc/geoclue/            r,
+  /etc/geoclue/**          r,
+  /etc/hosts               r,
+  /etc/host.conf           r,
+  /etc/nsswitch.conf       r,
+  /etc/ssl/openssl.cnf     r,
+  /run/connman/resolv.conf r,
+
+  @{PROC}/@{pid}/cgroup    r,
+}

debian/geoclue-2.0.install

+debian/apparmor.d/* /etc/apparmor.d/
 debian/local/geoclue-2.0.pkla var/lib/polkit-1/localauthority/10-vendor.d/
 debian/local/geoclue-2.0.rules usr/share/polkit-1/rules.d/
 etc/dbus-1/system.d/