Enigmail & AppArmor: Cannot get key from keyserver after finding it

In Tails 3.6~rc1 I cannot download keys from the keyserver with the Key selection interface as I used to do until Tails 3.5. It seems like the apparmor profile should be updated:

Steps to reproduce:

- Open Thunderbird with Enigmail configured

- Try to send an email to a new email address (that has a public key on the keyservers)

- The Enigmail menu comes out, click on ‘Download missing keys’.
- The searchbox appears, you can select a key, but the system gets quite frozen and nothing happens.

On the logs, I see:

Mar 12 08:39:38 amnesia kernel: audit: type=1400 audit(1520843978.662:282820993): apparmor=“DENIED” operation=“file_lock” profile=“thunderbird//gpg” name=“/home/amnesia/.gnupg/tofu.db” pid=8570 comm=“gpg2” requested_mask=“k” denied_mask=“k” fsuid=1000 ouid=1000

Related issues

• Related to #11973 (closed)
• Related to #15610 (closed)
• Blocks #15139 (closed)
• Blocked by #15607 (closed)

Original created by @emmapeel on 15395 (Redmine)