profiles/apparmor.d: add profile for tinyproxy

This was tested using the test-tinyproxy.py script from qa-regression-testing as
well as by running the upstream test suite with a brief hack to ensure it
invokes tinyproxy with aa-exec -p tinyproxy first.

Signed-off-by: Alex Murray <alex.murray@canonical.com>

profiles/apparmor.d/tinyproxy

@@ -0,0 +1,34 @@
+# -*- mode: apparmor; -*-
+# ------------------------------------------------------------------
+#
+#    Copyright (C) 2024 Canonical Ltd.
+#
+#    This program is free software; you can redistribute it and/or
+#    modify it under the terms of version 2 of the GNU General Public
+#    License published by the Free Software Foundation.
+#
+# ------------------------------------------------------------------
+# vim: ft=apparmor
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+profile tinyproxy /usr/bin/tinyproxy {
+  include <abstractions/base>
+  include <abstractions/nameservice>
+
+  file rw /run/tinyproxy/tinyproxy.pid,
+  file mr /usr/bin/tinyproxy,
+
+  file r @{etc_ro}/tinyproxy/tinyproxy.conf,
+  file rw /var/log/tinyproxy/tinyproxy.log,
+
+  file r /usr/share/tinyproxy/*,
+
+  network inet stream,
+  network inet6 stream,
+
+  # Site-specific additions and overrides. See local/README for details.
+  include if exists <local/tinyproxy>
+}