Bug 41243: Add apparmor profile to deb package

Merge Info

Related Issues

• tor-browser#xxxxx
• mullvad-browser#348 (closed)
• #41243 (closed)

Backporting

Timeline

• Immediate: patchset needed as soon as possible
• Next Minor Stable Release: patchset that needs to be verified in nightly before backport
• Eventually: patchset that needs to be verified in alpha before backport
• No Backport (preferred): patchset for the next major stable

(Optional) Justification

• Emergency security update: patchset fixes CVEs, 0-days, etc
• Censorship event: patchset enables censorship circumvention
• Critical bug-fix: patchset fixes a bug in core-functionality
• Consistency: patchset which would make development easier if it were in both the alpha and release branches; developer tools, build system changes, etc
• Sponsor required: patchset required for sponsor
• Other: please explain

Issue Tracking

• Link resolved issues with appropriate Release Prep issue for changelog generation

Review

Request Reviewer

• Request review from an applications developer depending on modified system:
  • NOTE: if the MR modifies multiple areas, please /cc all the relevant reviewers (since gitlab only allows 1 reviewer)
  • accessibility : henry
  • android : clairehurst, dan
  • build system : boklm
  • extensions : ma1
  • firefox internals (XUL/JS/XPCOM) : jwilde, ma1
  • fonts : pierov
  • frontend (implementation) : henry
  • frontend (review) : donuts, morgan
  • localization : henry, pierov
  • macOS : clairehurst, dan
  • nightly builds : boklm
  • rebases/release-prep : boklm, dan, ma1, morgan, pierov
  • security : jwilde, ma1
  • signing : boklm, morgan
  • updater : pierov
  • windows : jwilde, morgan
  • misc/other : morgan, pierov

Change Description

Adds an apparmor profile.

How Tested

I made a build with the patch:

• https://tb-build-03.torproject.org/~boklm/builds/mullvadbrowser/nightly/tbb-nightly.2024.10.17/mullvad-browser-nightly_14.0~2024.10.17-1_amd64.deb
• sha256sum: 453edf7e66b1e2ec788fd3587b856e5b872e88167a1592bf5e1d4817a6640f08

The apparmor file is included in the package and looks correct, but I didn't test that it actually fixes the issue.

@ruihildt: do you have an Ubuntu 24.04 machine to test that this package doesn't have the issue?