the profile is the one from Package: thunderbird Version: 1:52.2.1-4
All that mess came after upgrade of Thunderbird So I suspect this issue is in your original profile. root@debian:/# aa-disable usr.bin.thunderbird ERROR: local/usr.bin.thunderbird profile in local/usr.bin.thunderbird contains syntax errors in line 202: a child profile inside another child profile is not allowed. Line 202 is that one profile gpg { #include <abstractions/base> # Required to import keys from keyservers #include <abstractions/nameservice> #include <abstractions/p11-kit> Brother I dont write this myself!!