Tighten AppArmor policy

The results of our self-audit (#8007 (closed)) have lead to some fixes. Some are mostly ready in the topic branch, some need more thought and thus have dedicated subtasks.

Blueprint: https://tails.boum.org/blueprint/harden_AppArmor_profiles/

Subtasks

• #9533 (closed)
• #9756 (closed)
• #10462 (closed)
• #10463 (closed)
• #10836 (closed)
• #11578 (closed)
• #12125 (closed)

Related issues

• Related to #8007 (closed)
• Related to #6178 (closed)
• Related to #10422

Original created by @intrigeri on 9534 (Redmine)