I usually start TBB from double clicking on /tor-browser_en-US/start-tor-browser.desktop, or run /tor-browser_en-US/start-tor-browser/start-tor-browser in Konsole, is that OK? Is that the correct path used as the the function name in the AppArmor profile? I try both function names, but the profile could not confine TBB as well.