This update to apparmor 2.9.3 fixes the following issues:

- aa-complain, aa-enforce, aa-audit: change flags of hats, not only the main profile (+ some bugfixes)
- aa-notify: also display notifications for complain mode events
- add python to the "no Px rule" list in logprof.conf
- several bugfixes in the aa-* tools (including boo#954104 and several bugs on lp)
- parser: set cache file timestamp to mtime of most recent policy file timestamp (lp#1460152)
- add permissions in several profiles (including boo#948584, boo#948753, boo#939568, boo#954959, boo#954958, boo#940749, boo#971790, boo#945592, boo#964971, boo#921098, boo#923201 and boo#921098#c15)
- systemd-rpm-macros and %systemd_requires were at the wrong place, move them to the parser package (boo#931792)
- lots of bugfixes in the parser and the aa-* tools (including boo#918787)
- update dovecot and dnsmasq profiles and several abstractions (including boo#911001)
- make sure %service_del_postun doesn't call systemctl try-restart (boo#853019, bare systemd edition)
- update samba (winbindd and nmb) profiles for samba 4.2 (boo#921098, boo#923201)
- allow lessopen.sh to run /usr/bin/unzip-plain (boo#906858)
- add Requires: python3 to python3-apparmor package - readline isn't part of python3-base (boo#917577)