AppArmor: Replace dac_override capability by dac_read_search
dac_read_search
(Bypass file read permission checks and directory read and
execute permission checks) is now used as it is less permissive than
dac_override
(Bypass file read, write, and execute permission checks).
Signed-off-by: Frédéric Danis frederic.danis@collabora.com