Merge branch 'ecryptfs-top-dir' into 'master'

abstractions/base: allow read access to top-level ecryptfs directories

See merge request apparmor/apparmor!443

Acked-by: John Johansen <john.johansen@canonical.com> for 2.11..master
Acked-by: Christian Boltz <apparmor@cboltz.de> for 2.11..master


(cherry picked from commit 24895ea3)

fbd8981e abstractions/base: allow read access to top-level ecryptfs directories

profiles/apparmor.d/abstractions/base

@@ -155,7 +155,9 @@
   # prevents access to the files from processes running under a different uid.
 
   # encrypted ~/.Private and old-style encrypted $HOME
+  owner @{HOME}/.Private/ r,
   owner @{HOME}/.Private/** mrixwlk,
   # new-style encrypted $HOME
+  owner @{HOMEDIRS}/.ecryptfs/*/.Private/ r,
   owner @{HOMEDIRS}/.ecryptfs/*/.Private/** mrixwlk,