Enable AppArmor LSM.
Install the AppArmor userspace tools from Debian unstable.
Add AppArmor profile for Vidalia.

The idea is to test it in this branch so that we can get it included into
Debian soon.
Add AppArmor profile for Tor.

The idea is to test it in this branch so that we can get it included into
Debian soon.
Add AppArmor profile for Evince.

The idea is to test it in this branch so that we can get it included into
Debian soon.
Merge branch 'devel' into feature/apparmor

Conflicts:
	config/amnesia
	config/chroot_apt/preferences
Merge branch 'feature/wheezy' into feature/apparmor

Conflicts:
	config/chroot_local-packageslists/tails-common.list
Don't ship an AppArmor profile for Tor, the Debian package does.

This reverts commit 87b78ac92c14c707e3d058de696d710010af0e9d.
Add AppArmor alias from / to /lib/live/mount/rootfs/filesystem.squashfs/.

This is supposedly needed to take advantage of John Johansen's aliaspatch.
Update Vidalia's AppArmor profile to what's in Debian.
Merge branch 'feature/wheezy' into feature/apparmor

Conflicts:
	wiki/src/doc/first_steps/accessibility.fr.po
Ship an empty /etc/apparmor.d/local/usr.bin.vidalia that the usr.bin.vidalia profile depends on.
Merge branch 'devel' into feature/apparmor

Conflicts:
	config/amnesia
	config/chroot_local-packageslists/tails-common.list
	wiki/src/doc/advanced_topics/virtualization.fr.po
	wiki/src/doc/first_steps/startup_options/windows_camouflage.fr.po
Drop /etc/apparmor.d/tunables/alias: proper alias support in AppArmor upstream is still not ready, we'll try something else.
Revert "Add AppArmor profile for Evince."

This reverts commit d8c503921e3686e1b3531619dc4c1f16f5673800.

Once we have working AppArmor, we can take this profile from the
apparmor-profiles-extra package.
Revert "Ship an empty /etc/apparmor.d/local/usr.bin.vidalia that the usr.bin.vidalia profile depends on."

This reverts commit 1b9c286a6b5c142a0bdf5ba6a4db90d22c95979a.

The Vidalia Debian package now ships an AppArmor profile, and uses dh-apparmor
to create the local override file.
Drop Vidalia AppArmor profile: now shipped by the Debian package.
Patch the Tor AppArmor profile to make it work on a Live system.
Install the apparmor-profiles-extra package.

This gives us a few well-tested additional profiles that can be used
to find out how hard it'll be to make them work on a Live system.
Add /lib/live/mount/overlay/home/ to the HOMEDIRS AppArmor variable.

The kernel sees that place as the requested location for some files.
That's another workaround for the lack of native support in AppArmor
for stacked filesystems. We'll see how many of these it takes.