Hi Matthew, Am 05.02.23 um 21:04 schrieb Matthew Vernon: ...
Looking at the existing profile data template I think this should do the trick.# per-user thunderbird configuration owner @{HOME}/.{icedove,thunderbird}/ rw, - owner @{HOME}/.{icedove,thunderbird}/** rw, + owner @{HOME}/.{icedove,thunderbird,mozilla-thunderbird}/** rw, owner @{HOME}/.{icedove,thunderbird}/**/storage.sdb k, owner @{HOME}/.{icedove,thunderbird}/**/*.{db,parentlock,sqlite}* k, owner @{HOME}/.{icedove,thunderbird}/plugins/** rm,This is definitely not sufficient - you need k (lock) permissions inside .mozilla-thunderbird for e.g. parentlock (otherwise you get the "another thunderbird process is running" message). I think the answer is to adjust every line that has "owner @{HOME}/.{icedove,thunderbird}" to instead have owner @{HOME}/.{icedove,thunderbird,mozilla-thunderbird}" is the way to go, but I don't have time to try such a patch right now, sorry!
I'll build a new (test) version of 102.7.1 which has hopefully included the fix for the M$ OAuth problem tomorrow, I can add the too the fix for the AppArmor profile like you suggested.
-- Regrads Carsten
