AppArmor: Replace dac_override capability by dac_read_search

dac_read_search (Bypass file read permission checks and directory read and execute permission checks) is now used as it is less permissive than dac_override (Bypass file read, write, and execute permission checks).

Signed-off-by: Frédéric Danis frederic.danis@collabora.com