apparmor: add ro rule for sasl GSSAPI plugin on /etc/gss/mech.d/
apparmor: add ro rule for sasl GSSAPI plugin on /etc/gss/mech.d/

If a system has sasl GSSAPI plugin available qemu with sasl support will
try to read /etc/gss/mech.d/.

It is required to allow that to let the modules fully work and it should
be safe to do so as it only registers/configures plugins but has no secrets.

Reviewed-by: Daniel P. Berrangé <bb938cf255e055ff3507f2627d214e8e62118fcf@redhat.com>
Acked-by: Jamie Strandboge <b4dde37aa2aac745c0e6c43447507eaeace3e59f@canonical.com>
Signed-off-by: Christian Ehrhardt <48da28e2c2cd455d60e19b14c46925e20a3c5d5b@canonical.com>

andreabolognani/libvirt,eskultety/libvirt,crobinso/libvirt,zippy2/libvirt,fabianfreyer/libvirt,olafhering/libvirt,crobinso/libvirt,olafhering/libvirt,zippy2/libvirt,crobinso/libvirt,andreabolognani/libvirt,olafhering/libvirt,libvirt/libvirt,jardasgit/libvirt,libvirt/libvirt,eskultety/libvirt,jfehlig/libvirt,fabianfreyer/libvirt,jfehlig/libvirt,eskultety/libvirt,nertpinx/libvirt,andreabolognani/libvirt,nertpinx/libvirt,jardasgit/libvirt,jfehlig/libvirt,libvirt/libvirt,nertpinx/libvirt,zippy2/libvirt,libvirt/libvirt,jardasgit/libvirt,nertpinx/libvirt,jardasgit/libvirt,eskultety/libvirt,zippy2/libvirt,jardasgit/libvirt,fabianfreyer/libvirt,andreabolognani/libvirt,jfehlig/libvirt,olafhering/libvirt,nertpinx/libvirt,crobinso/libvirt,fabianfreyer/libvirt,andreabolognani/libvirt,fabianfreyer/libvirt,eskultety/libvirt