I found another way to disable the thunderbird profile
root@debian:/etc/apparmor.d/local# ls
bin.ping usr.bin.totem-previewers usr.lib.dovecot.log usr.sbin.dovecot
gst_plugin_scanner usr.lib.dovecot.anvil usr.lib.dovecot.managesieve
usr.sbin.identd
README usr.lib.dovecot.auth usr.lib.dovecot.managesieve-login usr.sbin.mdnsd
sbin.klogd usr.lib.dovecot.config usr.lib.dovecot.pop3 usr.sbin.nmbd
sbin.syslogd usr.lib.dovecot.deliver usr.lib.dovecot.pop3-login usr.sbin.nscd
sbin.syslog-ng usr.lib.dovecot.dict usr.lib.dovecot.ssl-params usr.sbin.smbd
usr.bin.chromium-browser usr.lib.dovecot.dovecot-auth usr.sbin.apt-cacher-ng
usr.sbin.smbldap-useradd
usr.bin.evince usr.lib.dovecot.dovecot-lda usr.sbin.avahi-daemon
usr.sbin.tcpdump
usr.bin.irssi usr.lib.dovecot.imap usr.sbin.cups-browsed usr.sbin.traceroute
usr.bin.pidgin usr.lib.dovecot.imap-login usr.sbin.cupsd
usr.bin.totem usr.lib.dovecot.lmtp usr.sbin.dnsmasq
root@debian:/etc/apparmor.d/local# touch usr.bin.thunderbird
root@debian:/etc/apparmor.d/local# aa-disable usr.bin.thunderbird
Disabling /etc/apparmor.d/local/usr.bin.thunderbird.
root@debian:/etc/apparmor.d/local# cd ../disable
root@debian:/etc/apparmor.d/disable# ls -alrt
total 12
lrwxrwxrwx 1 root root 29 juin 30 12:13 usr.bin.totem ->
/etc/apparmor.d/usr.bin.totem
drwxr-xr-x 9 root root 4096 juil. 12 11:57 ..
drwxr-xr-x 2 root root 4096 juil. 12 16:31 local
drwxr-xr-x 3 root root 4096 juil. 12 16:31 .
root@debian:/etc/apparmor.d/disable# cd local
root@debian:/etc/apparmor.d/disable/local# ls -alrt
total 8
lrwxrwxrwx 1 root root 41 juil. 12 16:31 usr.bin.thunderbird ->
/etc/apparmor.d/local/usr.bin.thunderbird
drwxr-xr-x 3 root root 4096 juil. 12 16:31 ..
drwxr-xr-x 2 root root 4096 juil. 12 16:31 .
root@debian:/etc/apparmor.d/disable/local# systemctl reload apparmor
root@debian:/etc/apparmor.d/disable/local# systemctl status apparmor
● apparmor.service - AppArmor initialization
Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor
preset: enabled)
Active: active (exited) since Wed 2017-07-12 13:29:05 CEST; 3h 6min ago
Docs: man:apparmor(7)
http://wiki.apparmor.net/
Process: 4821 ExecReload=/etc/init.d/apparmor reload (code=exited,
status=0/SUCCESS)
Process: 442 ExecStart=/etc/init.d/apparmor start (code=exited,
status=0/SUCCESS)
Main PID: 442 (code=exited, status=0/SUCCESS)
juil. 12 16:02:19 debian systemd[1]: Reloaded AppArmor initialization.
juil. 12 16:20:23 debian systemd[1]: Reloading AppArmor initialization.
juil. 12 16:20:27 debian apparmor[4492]: Reloading AppArmor profiles:Skipping
profile in /etc/apparmor.d/disable: usr.bin.thunderbird
juil. 12 16:20:27 debian apparmor[4492]: Skipping profile in
/etc/apparmor.d/disable: usr.bin.totem
juil. 12 16:20:32 debian apparmor[4492]: .
juil. 12 16:20:32 debian systemd[1]: Reloaded AppArmor initialization.
juil. 12 16:34:54 debian systemd[1]: Reloading AppArmor initialization.
juil. 12 16:34:59 debian apparmor[4821]: Reloading AppArmor profiles:Skipping
profile in /etc/apparmor.d/disable: usr.bin.totem
juil. 12 16:35:04 debian apparmor[4821]: .
juil. 12 16:35:04 debian systemd[1]: Reloaded AppArmor initialization.
Conclusion :
it really needs to have a usr.bin.thunderbird in :/etc/apparmor.d/local
