On Sun, Mar 26 2017, Carsten Schoenert wrote:
> On Sat, Mar 25, 2017 at 12:34:04PM -0700, Gerald Turner wrote:
>>   * The kernel logged many AppArmor denials, mainly for the lockfile
>>     in ~/.icedove (but also some peculiar PCI device access, log
>>     attached).
>
> this is happen because the AppArmor profile is only allowing access to
> $HOME/.thunderbird/* and the real user profile is still using
> ~/.icedove.  Matthias reported the same issue with a probably solution
> in #858737. I changed the profile with the adoptions Matthias is
> suggesting. Can you please test the new profile?

The new AppArmor profile works - I restored the .icedove directory and
.thunderbird symlink, overwrote /etc/apparmor.d/usr.bin.thunderbird with
your attachment, reloaded apparmor, started thunderbird - runs fine.
Note however there are still those two /sys PCI device access denials
mentioned earlier.  The device Thunderbird is trying to access happens
to be my video card.  Previous icedove packages probably did the same
thing but I had never noticed.  Nevertheless Thunderbird works fine (and
probably a good thing that it's WebGL-init or whatever is failing).

-- 
Gerald Turner <gtur...@unzane.com>        Encrypted mail preferred!
OpenPGP: 4096R / CA89 B27A 30FA 66C5 1B80  3858 EC94 2276 FDB8 716D

Attachment: signature.asc
Description: PGP signature

Reply via email to