apparmor denial to cache for confined scopes

[Jamie Strandboge]

In a recent test run, the following denial was observed:
Oct 1 18:13:05 ubuntu-phablet kernel: [ 130.968843] (3)[6618:com.ubuntu.yelp]type=1400 audit(1412187185.260:127): apparmor="DENIED" operation="mkdir" profile="com.ubuntu.yelp_yelp_1.0.26" name="/home/phablet/.local/share/unity-scopes/com.ubuntu.yelp_yelp/" pid=6618 comm="com.ubuntu.yelp" requested_mask="c" denied_mask="c" fsuid=32011 ouid=32011

Yelp is using the wrong directory. It is using:
@{HOME}/.local/share/unity-scopes/@{APP_PKGNAME}_@{APP_APPNAME}

but apparmor policy says to use:
@{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}

Note: this is a different bug than the one dealing with XDG_RUNTIME_DIR paths, where we do use @{APP_APPNAME}.

Adding rtm14 tag with High priority since this seems to affect scopes in the store. Please readjust as necessary.

[Michi Henning (michihenning)]

This should be fixed now. The location/name for the dir were incorrect. The failure was benign for unconfined scopes, but prevented access to the cache dir for confined scopes.

[Pete Woods (pete-woods)]

This bug was about syslog noise (this is where AppArmor logs denials, etc)