s/apparmor: probe parser support for tags

[olivercalder]

Probe whether the AppArmor parser supports tags.

This is preliminary work before wiring metadata tagging support checks into profile generation.

This work is tracked internally by https://warthogs.atlassian.net/browse/SNAPDENG-34580

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 78.09%. Comparing base (d6d95f0) to head (1f4fb21).
Report is 9 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #15198      +/-   ##
==========================================
- Coverage   78.09%   78.09%   -0.01%     
==========================================
  Files        1190     1190              
  Lines      158458   158552      +94     
==========================================
+ Hits       123746   123816      +70     
- Misses      27017    27033      +16     
- Partials     7695     7703       +8     

Flag	Coverage Δ
unittests	78.09% <100.00%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

Thu Mar 13 19:05:42 UTC 2025
The following results are from: https://github.com/canonical/snapd/actions/runs/13821552150

Failures:

Executing:

• openstack:debian-12-64:tests/main/progress
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-backoff
• openstack:opensuse-tumbleweed-64:tests/main/snap-refresh-hold
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-gating
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-pre-download:close
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-pre-download:ignore
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh:regular
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-pre-download:close_mid_restart
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-pre-download:restart
• openstack:opensuse-tumbleweed-64:tests/main/refresh-app-awareness-notify
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-gating-from-snap
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh:parallel
• openstack:opensuse-tumbleweed-64:tests/main/auto-refresh-retry
• google:ubuntu-25.04-64:tests/main/snap-user-service-socket-activation
• google:ubuntu-25.04-64:tests/main/security-device-cgroups-self-manage
• google:ubuntu-25.04-64:tests/main/security-device-cgroups:uinput
• google:ubuntu-25.04-64:tests/main/security-device-cgroups-serial-port
• google:ubuntu-25.04-64:tests/main/security-device-cgroups-helper
• google:ubuntu-25.04-64:tests/main/security-device-cgroups-strict-enforced
• google:ubuntu-25.04-64:tests/main/security-device-cgroups-required-or-optional
• google:ubuntu-25.04-64:tests/main/cgroup-devices-v2
• google:ubuntu-25.04-64:tests/main/security-device-cgroups:kmsg
• google:ubuntu-25.04-64:tests/main/snap-ns-forward-compat
• google:ubuntu-25.04-64:tests/main/microk8s-smoke:edge

Restoring:

• openstack:debian-sid-64:tests/main/interfaces-timeserver-control
• openstack:opensuse-tumbleweed-64:tests/main/refresh-app-awareness-notify
• google:ubuntu-25.04-64:tests/main/security-device-cgroups-strict-enforced

[bboozzoo]

LGTM

[zyga]

Thanks