apparmor: compute policydb permission on profile load

[ Upstream commit e2967ede22978f132cd52929edff96c701bde0eb ]

Rather than computing policydb permissions for each access
permissions can be computed once on profile load and stored for lookup.

Signed-off-by: John Johansen <john.johansen@canonical.com>
based-on-backport-by: Mathias Gibbens <gibmat@debian.org>
[ jj: backport to v6.1 by replacing kvcalloc with kvzalloc as commit ???
  is not present. Add oneline declaration of `struct aa_perms default_perms
  from commit 408d53e923bd as that commit is not present and only
  the declaration from it is needed. ]
Link: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052130
Link: http://bugs.launchpad.net/bugs/1780227
Fixes: 56974a6fcfef ("apparmor: add base infastructure for socket mediation")
Tested-by: Mathias Gibbens <gibmat@debian.org>
Signed-off-by: John Johansen <john.johansen@canonical.com>