deb#887593 use child profile for gpg

see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887593#41

Change-Id: I365de8bf8a43a1aa304c5206a1f0c29d6a44855e

sysui/desktop/apparmor/program.soffice.bin

@@ -126,8 +126,8 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
   /usr/bin/lpr                          rmPUx,
   /usr/bin/paperconf                    rmix,
   /usr/bin/gpgconf                      rmix,
-  /usr/bin/gpg                          rmix,
-  /usr/bin/gpgsm                        rmix,
+  /usr/bin/gpg                          rmCx -> gpg,
+  /usr/bin/gpgsm                        rmCx -> gpg,
 
   /dev/tty                              rw,
 
@@ -171,5 +171,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
 
   owner @{HOME}/.mozilla/firefox/** r,
   # there is abstractions/gnupg but that's just for gpg1...
-  owner @{HOME}/.gnupg/* r,
+  profile gpg {
+    owner @{HOME}/.gnupg/* r,
+  }
 }