On 2017.11.18 04:07, Ben Caradoc-Davies wrote:
when apparmor is enabled, thunderbird signatures from files disappear. For
example, one account uses: "Attach the signature from a file instead":
/home/ben/[email protected]
You mean, signatures are not loaded into Thunderbird, or these files where
removed from the file system?
Anyway, this is rather strange, usr.bin.thunderbird allows to read all files
from home directory [0]:
```
owner @{HOME}/** rw,
```
Maybe it needed lock permission? Could you try to discover relevant DENIED
messages from logs?
I'll try to test that signature feature on my machine.
If I disable apparmor with "systemctl mask apparmor.service" and reboot,
thunderbird signatures from files work again.
Oh now, please don't do that :( . All your discovered AppArmor related issues
are valuable.
You can try to enforce complain on profile manually by creating symlink (just
tried that myself):
```
sudo ln -s /etc/apparmor.d/usr.bin.thunderbird
/etc/apparmor.d/force-complain/usr.bin.thunderbird
sudo apparmor_parser -r /etc/apparmor.d/usr.bin.thunderbird
```