virt-aa-helper: add rules for shmem devices
virt-aa-helper: add rules for shmem devices

Shared memory devices need qemu to be able to access certain paths
either for the shared memory directly (mostly ivshmem-plain) or for a
socket (mostly ivshmem-doorbell).

Add logic to virt-aa-helper to render those apparmor rules based
on the domain configuration.

https://bugzilla.redhat.com/show_bug.cgi?id=1761645

Reviewed-by: Cole Robinson <7cd45ff6ad1fb7cf556a02797d774247851499f8@redhat.com>
Acked-by: Jamie Strandboge <b4dde37aa2aac745c0e6c43447507eaeace3e59f@canonical.com>
Signed-off-by: Christian Ehrhardt <48da28e2c2cd455d60e19b14c46925e20a3c5d5b@canonical.com>

nertpinx/libvirt,crobinso/libvirt,libvirt/libvirt,jardasgit/libvirt,zippy2/libvirt,jfehlig/libvirt,jardasgit/libvirt,zippy2/libvirt,jardasgit/libvirt,libvirt/libvirt,fabianfreyer/libvirt,nertpinx/libvirt,crobinso/libvirt,jfehlig/libvirt,olafhering/libvirt,jfehlig/libvirt,olafhering/libvirt,olafhering/libvirt,olafhering/libvirt,crobinso/libvirt,libvirt/libvirt,nertpinx/libvirt,zippy2/libvirt,fabianfreyer/libvirt,jfehlig/libvirt,fabianfreyer/libvirt,jardasgit/libvirt,zippy2/libvirt,nertpinx/libvirt,fabianfreyer/libvirt,fabianfreyer/libvirt,crobinso/libvirt,libvirt/libvirt,jardasgit/libvirt,nertpinx/libvirt