debian: Add rules for reading profiles from distro and local dirs

Allow a user to pass profiles from the distro or local dirs directly
to swtpm. A rule to allow reading profiles from somewhere under the
HOME directory already exists.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>

debian/usr.bin.swtpm

@@ -28,8 +28,10 @@ profile swtpm /usr/bin/swtpm {
 
   /run/libvirt/qemu/swtpm/*.pid rwk,
   /run/libvirt/qemu/swtpm/*.sock rwk,
-  /tmp/** rwk,
   /var/lib/libvirt/swtpm/** wk,
+  /usr/share/swtpm/profiles/*.json r,  # distro profiles
+  /etc/swtpm/profiles/*.json r,        # local profiles
+  /tmp/** rwk,
 
   owner /dev/vtpmx rw,
   owner /etc/nsswitch.conf r,