[pkg-apparmor] Bug#949450: thunderbird: tb not usable with apparmor profile enabled.

[Carsten Schoenert]

Hello Dimitry,

Am 27.01.20 um 12:16 schrieb dimitris at stinpriza.org:
> Package: thunderbird
> Version: 1:68.4.2-1
> Followup-For: Bug #949450
> 
> hey,
> 
> i think severity should be raised to important or even grave.

feel free to increase the severity to important. I disagree with grave
or serious as the profile is disabled by default.
Normally we handle AA issues as wishlist.

> thunderbird/enigmail is unusable with default apparmor profile enabled.. this
> particular message is one of many, makes encrypt/decrypt/signing completely
> unusable. tried to add exceptions to apparmor, but new DENIED msgs rise.. and
> not just for thunderbird/gpg.
> eg. /OfflineCache/index.sqlite DENIED, filterlog.html DENIED..

Logs are always fine and helpful. Also diffs from te modified
configuration files. And they are needed to fix the problems. I added
the Apparmor people into the loop, they know better what they maybe need
more than the usual log from dmesg.

@Intri and Vincas
Coukd have a look at this issue here. Dimitry added some logging
information within his first email. Thanks!

> 
> atm, i've disabled apparmor profile and got back to a usable tb/enigmail. i
> could send more details/messages if needed or a new bug report(?).
> 
> thanks,
> d.
> 
> 
> 
> -- System Information:
> Debian Release: bullseye/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 5.4.14-gnu (SMP w/4 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: sysvinit (via /sbin/init)
> LSM: AppArmor: enabled
> 
> Versions of packages thunderbird depends on:
> ii  debianutils               4.9.1
> ii  fontconfig                2.13.1-2+b1
> ii  libatk1.0-0               2.34.1-1
> ii  libc6                     2.29-9
> ii  libcairo-gobject2         1.16.0-4
> ii  libcairo2                 1.16.0-4
> ii  libdbus-1-3               1.12.16-2
> ii  libdbus-glib-1-2          0.110-5
> ii  libevent-2.1-7            2.1.11-stable-1
> ii  libffi7                   3.3-3
> ii  libfontconfig1            2.13.1-2+b1
> ii  libfreetype6              2.10.1-2
> ii  libgcc1                   1:9.2.1-25
> ii  libgdk-pixbuf2.0-0        2.40.0+dfsg-2
> ii  libglib2.0-0              2.62.4-1+b1
> ii  libgtk-3-0                3.24.13-1
> ii  libgtk2.0-0               2.24.32-4
> ii  libicu63                  63.2-2
> ii  libjsoncpp1               1.7.4-3.1
> ii  libnspr4                  2:4.24-1
> ii  libnss3                   2:3.49.1-1
> ii  libpango-1.0-0            1.42.4-8
> ii  libsqlite3-0              3.31.0+really3.30.1+fossil191229-1
> ii  libstartup-notification0  0.12-6
> ii  libstdc++6                9.2.1-25
> ii  libvpx6                   1.8.2-1
> ii  libx11-6                  2:1.6.8-1
> ii  libx11-xcb1               2:1.6.8-1
> ii  libxcb-shm0               1.13.1-3
> ii  libxcb1                   1.13.1-3
> ii  libxext6                  2:1.3.3-1+b2
> ii  libxrender1               1:0.9.10-1
> ii  libxt6                    1:1.1.5-1+b3
> ii  psmisc                    23.3-1
> ii  x11-utils                 7.7+4
> ii  zlib1g                    1:1.2.11.dfsg-1+b1
> 
> Versions of packages thunderbird recommends:
> ii  hunspell-el [hunspell-dictionary]     1:6.4.0~rc2-1
> ii  hunspell-en-us [hunspell-dictionary]  1:2018.04.16-1
> pn  lightning                             <none>
> 
> Versions of packages thunderbird suggests:
> ii  apparmor          2.13.3-7
> pn  fonts-lyx         <none>
> ii  libgssapi-krb5-2  1.17-6
> 
> -- Configuration Files:
> /etc/apparmor.d/usr.bin.thunderbird changed [not included]
> 
> -- no debconf information
> 

-- 
Regards
Carsten Schoenert