Package: thunderbird
Version: 1:102.7.1-1
Severity: important
Hi,
I've just upgraded my very-long-running system to bookworm, and I was
stuck for some time because thunderbird wouldn't start, complaining it
couldn't read my profile. Syslog revealed the issue to be apparmor:
Feb 4 11:20:14 aragorn kernel: [ 169.355039] audit: type=1400
audit(1675509614.798:47): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/matthew/.mozilla-thunderbird/profiles.ini"
pid=3565 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1024
ouid=1024
I have an old-enough system that thunderbird used to use
~/.mozilla-thunderbird as its profile directory (then it was .icedove
and now .thunderbird), and while subsequent upgrades have created the
necessary symlinks, this isn't good enough for apparmor. The following
apparmor addition does the trick:
owner @{HOME}/.mozilla-thunderbird/{,**} rwlk,
and I think should be added to the thunderbird apparmor config; because
I surely won't be the only person with a long-running Debian install who
will otherwise trip over this in bookworm as we default to enabling
apparmor.
Thanks,
Matthew
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-2-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages thunderbird depends on:
ii debianutils 5.7-0.4
ii fontconfig 2.14.1-3
ii libasound2 1.2.8-1+b1
ii libatk1.0-0 2.46.0-5
ii libc6 2.36-8
ii libcairo-gobject2 1.16.0-7
ii libcairo2 1.16.0-7
ii libdbus-1-3 1.14.4-1
ii libdbus-glib-1-2 0.112-3
ii libevent-2.1-7 2.1.12-stable-5+b1
ii libffi8 3.4.4-1
ii libfontconfig1 2.14.1-3
ii libfreetype6 2.12.1+dfsg-4
ii libgcc-s1 12.2.0-14
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-1+b1
ii libglib2.0-0 2.74.5-1
ii libgtk-3-0 3.24.36-2
ii libicu72 72.1-3
ii libnspr4 2:4.35-1
ii libnss3 2:3.87-1
ii libpango-1.0-0 1.50.12+ds-1
ii librnp0 0.16.2-1
ii libstdc++6 12.2.0-14
ii libvpx7 1.12.0-1
ii libx11-6 2:1.8.3-3
ii libx11-xcb1 2:1.8.3-3
ii libxcb-shm0 1.15-1
ii libxcb1 1.15-1
ii libxext6 2:1.3.4-1+b1
ii libxrandr2 2:1.5.2-2+b1
ii psmisc 23.6-1
ii x11-utils 7.7+5
ii zenity 3.44.0-1
ii zlib1g 1:1.2.13.dfsg-1
Versions of packages thunderbird recommends:
ii hunspell-en-gb [hunspell-dictionary] 1:7.4.2-1
ii myspell-en-us [myspell-dictionary] 1:3.3.0-4+deb8u1
Versions of packages thunderbird suggests:
ii apparmor 3.0.8-2+b1
ii fonts-lyx 2.3.7-1
ii libgssapi-krb5-2 1.20.1-1
-- no debconf information
