AppArmor profile update for PGroonga + MeCab tokenizer (#479)

* chore: update postgres armor profile to support MeCab tokenizer for PGroonga

* chore: bump pg version

Author: pcnc

common.vars.pkr.hcl

@@ -1 +1 @@
-postgres-version = "15.1.0.24"
+postgres-version = "15.1.0.25"

ebssurrogate/files/apparmor_profiles/usr.lib.postgresql.bin.postgres

@@ -20,6 +20,7 @@ deny @{HOME}/** rwx,
 /etc/java-11-openjdk/security/default.policy r,
 /etc/java-11-openjdk/security/java.policy r,
 /etc/java-11-openjdk/security/java.security r,
+/etc/mecabrc r,
 /etc/postgresql-custom/** r,
 /etc/postgresql/** r,
 /etc/timezone r,
@@ -31,10 +32,12 @@ deny @{HOME}/** rwx,
 /usr/bin/admin-mgr Ux,
 /usr/lib/postgresql/bin/* mrix,
 /usr/local/bin/wal-g rix,
+/usr/local/lib/groonga/plugins/tokenizers/mecab.so mr,
 /usr/local/lib/libSFCGAL.so.* mr,
 /usr/local/lib/libgroonga.so.* mr,
 /usr/local/pgsql/etc/pljava.policy r,
 /usr/share/postgresql/** r,
+/var/lib/mecab/** r,
 /var/lib/postgresql/** rwl,
 /var/log/postgresql/** rw,
 /var/log/wal-g/** w,