Add passphrases.py AppArmor rule

[emkll]

Status

Ready for review

Description of Changes

Fixes #5703

Testing

From scratch:

• make build-debs and make staging on this branch
• Follow the steps to reproduce in [QA 1.7.0] Admin actions for user management trigger 500 #5703 and observe
• No AppArmor deny errors in /var/log/kern.log

OR, if you already have a 1.7.0-rc1 server (virtualized or hardware) already running:

• edit /etc/apparmor.d/usr.sbin.apache2 and add the line in the AppArmor config
• unload the existing rules sudo service apparmor teardown
• restart apparmor sudo service apparmor restart
• Cannot reproduce the str in [QA 1.7.0] Admin actions for user management trigger 500 #5703
• No AppArmor deny errors in /var/log/kern.log

Deployment

These changes for both new and existing installs will be handled by the securedrop-app-code debian package.

Checklist

If you made non-trivial code changes:

• I have written a test plan and validated it for this PR

[emkll]

Added wordlists/ per @rmol 's feedback, should be ready for re-review now

[rmol]

Good to merge once green. Checked the latest, no apparmor violations seen, journalist interface user addition working, source generation fine.

[codecov-io]

Codecov Report

Merging #5705 (387a803) into develop (dc5338d) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop    #5705   +/-   ##
========================================
  Coverage    85.58%   85.58%           
========================================
  Files           52       52           
  Lines         3773     3773           
  Branches       471      471           
========================================
  Hits          3229     3229           
  Misses         439      439           
  Partials       105      105           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update dc5338d...387a803. Read the comment docs.