Adding custom apparmor rules

[Darren Landoll]

> I'm working on a capability system. It's a bit premature to offer you
> a chance to use it (it's not there by any chance, yet) but I'm curious
> about the specific files and why you need to read them. Could you
> expand on that please?
>

I was trying to get read access to a PCI Ethernet card under
/sys/devices/... for its MAC address, so I could've used hw-assign but
I guess I wasn't sure if that could be pre-assigned via the package
metadata and ended up going down the route of a custom apparmor
policy.