Accepting request 663645 from home:cboltz

- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)

OBS-URL: https://build.opensuse.org/request/show/663645
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=229

apparmor.spec

@@ -69,6 +69,9 @@ Patch8:         apparmor-nameservice-resolv-conf-link.patch
 # submitted upstream 2019-01-02 - https://gitlab.com/apparmor/apparmor/merge_requests/296 (master + 2.13) and https://gitlab.com/apparmor/apparmor/merge_requests/297 (2.12)
 Patch9:         profile_filename_cornercase.diff
 
+# workaround for boo#1119937 / lp#1784499 - allow network access for reading files on NFS (proper solution needs kernel fix)
+Patch10:        apparmor-lessopen-nfs-workaround.diff
+
 PreReq:         sed
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %define apparmor_bin_prefix /lib/apparmor
@@ -358,6 +361,7 @@ SubDomain.
 %patch7
 %patch8 -p1
 %patch9 -p1
+%patch10
 
 %build
 export SUSE_ASNEEDED=0