Please unrevert the apparmor audit rule filtering feature

[Jamie Strandboge]

Ubuntu carried a patch to apparmor for audit rule filtering, but it was reverted due to conflicts related to secids with earlier LSM stacking patchsets. The upstream LSM stacking patchset is believed to resolve these issues and groovy now carries the updated LSM stacking patchset.As such, please re-enable the audit rule filtering feature in apparmor.

CORRECTION: groovy's stacking patchset was revved but doesn't have the latest so we'd need to refresh the full stack to reenable the audit rule filtering feature.

[Jamie Strandboge (jdstrand)]

After more discussion with John, while groovy does have a newer stacking patchset, it doesn't have the latest patchset that resolves the audit subsystem. Unfortunately, as of today, all of those patches haven't been signed-off on yet so there might be future changes.

[Jamie Strandboge (jdstrand)]

FYI, John refreshed the patchset to v20 and reenabled audit rule filtering and submitted to https://lists.ubuntu.com/archives/kernel-team/2020-October/113932.html. Since this is a significant change, it will be considered for a stable release update (SRU) after groovy release (to allow for peer review, QA, etc).

[Jamie Strandboge (jdstrand)]

Thanks John! :)