[apparmor] [PATCH v2 0/5] Add basic support for Coverity builds

[Tyler Hicks]

* Changes since v1:
  - Collect acks
  - Adjust 'Reorder DIRS variable according to build order' patch to put parser
    before utils
  - Added 'Simplify REPO_VERSION_CMD in Make.rules' patch
  - Added 'Makefile: Convert shell variables into reusable make variables'
    patch
  - Base 'Makefile: Add coverity target' patch on the existing snapshot make
    target so that it is obvious which snapshot a Coverity build is based on
  - Adjust 'README: Document Coverity support' to mention snapshot versioning

I've set up an AppArmor project on scan.coverity.com:

  https://scan.coverity.com/projects/apparmor

The project is currently set to allow anyone to view the project summary while
only pre-approved folks will be able to view the actual defects.

AppArmor maintainers have been sent invitations to join the project as
owners/maintainers. The invitation emails are slowly trickling out so you may
have to be patient.

This patch set adds support for a top level Makefile target that generates a
coverity/apparmor-<SNAPSHOT_VERSION>-cov-int.tar.gz file which is suitable for
uploading to scan.coverity.com for analysis.

I've used this patch set to generate such a file and have uploaded it for
analysis. I had planned on waiting to see if the initial analysis worked as
expected before sending out this patch set. However, it looks like we may have
to wait several weeks to get to the front of the analysis queue so I'm opting
to send this patch set out now instead of letting it rot in my local git tree.
We can adjust things, as needed, after our first analysis.

An obvious future goal would be to use this basic level of support to
automatically submit builds for analysis (possibilities are each commit, each
day, each week, etc.).

Tyler