AppArmor denials

Most of the denials are because the "audio" policy group is not specified. There is another though:
Feb 13 00:04:30 ubuntu-phablet kernel: [ 122.191616] type=1400 audit(1392249870.414:102): apparmor="DENIED" operation="open" parent=1308 profile="com.ubuntu.reminders_reminders_0.4.63.2" name="/usr/share/qtdeclarative5-ubuntu-ui-extras-browser-plugin/assets/multi_selection_handle@20.png" pid=1944 comm="reminders" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

It seems the reason we need the audio policy is for the camera click.

Fix committed into lp:reminders-app at revision 65, scheduled for release in reminders-app, milestone 0.4

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.1.5

---------------
apparmor-easyprof-ubuntu (1.1.5) trusty; urgency=medium

  * 1.0/ubuntu-sdk: add read to qtdeclarative5-ubuntu-ui-extras-browser-plugin
    for applications that use UbuntuWebview (LP: #1280293)
  * 1.1/webview: add read to qtdeclarative5-ubuntu-ui-extras-browser-plugin.
    With 1.1 we will use oxide so all applications using UbuntuWebview will
    need to specify this policy group, so just add it here rather than
    the ubuntu-sdk template
  * adjust ubuntu-* templates to allow read to /usr/share/libthai/thbrk.tri
    as a temporary fix until the AppArmor fonts abstraction has the real fix
    (LP: #1278702)
  * 1.1/ubuntu-webapp: explicitly deny noicy read access to /sys/bus/ and
    /sys/class/
 -- Jamie Strandboge <email address hidden> Tue, 18 Feb 2014 09:00:55 -0600