Confine Thunderbird with AppArmor
IMO, when we install Icedove from Debian, the AppArmor profile from the
package should be installed and enforced by default. I can’t see the
/etc/apparmor.d nor when running
sudo aa-status. Tested in
2.7 and 3.0 (feature/stretch).
Feature Branch: tails:feature/11973-enable-thunderbird-apparmor-profile icedove:tails/stretch