build: auto-generate syntax lists

Changes:

* Use the commands from contrib/vim/syntax/firejail.vim to create
  makefile targets to generate syntax lists in contrib/syntax/lists
* Add contrib/syntax/files/example.in as an example of how to generate
  syntax files
* Generate and add the syntax lists, to make it easier to spot if they
  are properly updated when a new command is added or if their recipes
  also need changes
* Add "syntax" and "contrib" makefile targets

Note: The generation commands are executed mostly silently to avoid
generating too much noise when also making other targets.

Note2: In some generation commands, a `$$` escape is used to pass `$` to
the shell, to avoid being interpreted by make as the start of a macro.

Note3: `@make_input@` is used in example.in to make it clear that the
file is generated (and that it is generated by make rather than
configure), similarly to how `@configure_input@` is used in configure
input files.  See also apparmor.vim:

    $ head -n 2 /usr/share/vim/vimfiles/syntax/apparmor.vim
    " generated from apparmor.vim.in by create-apparmor.vim.py
    " do not edit this file - edit apparmor.vim.in or create-apparmor.vim.py instead

Environment: apparmor 3.1.2-1 on Artix Linux.

Relates to #2679 #5502 #5577 #5612.

1 files changed, 76 insertions, 0 deletions

diff --git a/contrib/syntax/lists/profile_commands_arg1.list b/contrib/syntax/lists/profile_commands_arg1.list
new file mode 100644
index 000000000..c703f2257
--- /dev/null
+++ b/contrib/syntax/lists/profile_commands_arg1.list
@@ -0,0 +1,76 @@
+apparmor
+bind
+blacklist
+blacklist-nolog
+caps.drop
+caps.keep
+cpu
+dbus-system.broadcast
+dbus-system.call
+dbus-system.own
+dbus-system.see
+dbus-system.talk
+dbus-user.broadcast
+dbus-user.call
+dbus-user.own
+dbus-user.see
+dbus-user.talk
+defaultgw
+dns
+env
+hostname
+hosts-file
+ignore
+include
+ip
+ip6
+iprange
+join-or-start
+keep-fd
+mac
+mkdir
+mkfile
+mtu
+name
+net
+netfilter
+netfilter6
+netmask
+netns
+nice
+noblacklist
+noexec
+nowhitelist
+overlay-named
+private
+private-bin
+private-cwd
+private-etc
+private-home
+private-lib
+private-opt
+private-srv
+protocol
+read-only
+read-write
+restrict-namespaces
+rlimit-as
+rlimit-cpu
+rlimit-fsize
+rlimit-nofile
+rlimit-nproc
+rlimit-sigpending
+rmenv
+seccomp
+seccomp-error-action
+seccomp.32
+seccomp.32.drop
+seccomp.32.keep
+seccomp.drop
+seccomp.keep
+timeout
+tmpfs
+veth-name
+whitelist
+whitelist-ro
+xephyr-screen