parser: abort if parser has setuid bit
If someone does chmod 4755 apparmor_parser
, the parser will print a warning
apparmor_parser: Warning! You've set this program setuid root.
Anybody who can run this program can update your AppArmor profiles.
However, it still happily continues to work, allowing anybody to load or unload profiles.
As discussed for aa-load in !770 (merged), it would be better if the parser aborts in this case.