Package: icedove
Version: 1:45.6.0-2
Severity: normal
Tags: patch
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Douglas Bagnall <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Subject: icedove: links don't open in browser (due to apparmor restrictions on
exo-open)
Message-ID: <148602214168.29518.11570819306163649937.report...@kip.halo.gen.nz>
X-Mailer: reportbug 7.1.4
Date: Thu, 02 Feb 2017 20:55:41 +1300
Package: icedove
Version: 1:45.6.0-2
Severity: normal
Tags: patch
Dear Maintainer,
Clinking on a url in an email fails to open the link in a browser
because icedove is trying to open the link using exo-open, but
apparmor is preventing this from working.
As strace puts it:
[pid 28502] execve("/usr/bin/exo-open", ["exo-open", "--launch", "WebBrowser",
"https://lwn.net/current/";], [/* 66 vars */]) = -1 EACCES (Permission denied)
Looking in /etc/apparmor.d, I found this incantation:
--- /etc/apparmor.d/usr.bin.icedove~ 2017-01-11 08:03:25.000000000 +1300
+++ /etc/apparmor.d/usr.bin.icedove 2017-02-02 20:21:19.178327290 +1300
@@ -25,6 +25,12 @@
#include <abstractions/ubuntu-browsers>
#include <abstractions/ubuntu-helpers>
+ # For Xubuntu to launch the browser
+ /usr/bin/exo-open ixr,
+ /usr/lib/@{multiarch}/xfce4/exo-1/exo-helper-1 ixr,
+ /etc/xdg/xdg-xubuntu/xfce4/helpers.rc r,
+ /etc/xdg/xfce4/helpers.rc r,
+
# for crash reports?
ptrace (read,trace) peer=@{profile_name},
Adding those lines fixes it.
I am sorry if this is a dupe, but I couldn't find anything else
referring to the same cause (if that is the root cause).
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_NZ.utf8, LC_CTYPE=en_NZ.utf8 (charmap=UTF-8) (ignored: LC_ALL
set to en_NZ.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages icedove depends on:
ii debianutils 4.8.1
ii fontconfig 2.11.0-6.7
ii libasound2 1.1.2-1
ii libatk1.0-0 2.22.0-1
ii libc6 2.24-8
ii libcairo2 1.14.8-1
ii libdbus-1-3 1.10.14-1
ii libdbus-glib-1-2 0.108-2
ii libevent-2.0-5 2.0.21-stable-2.1
ii libffi6 3.2.1-6
ii libfontconfig1 2.11.0-6.7
ii libfreetype6 2.6.3-3+b1
ii libgcc1 1:6.3.0-5
ii libgdk-pixbuf2.0-0 2.36.3-1
ii libglib2.0-0 2.50.2-2
ii libgtk2.0-0 2.24.31-1
ii libhunspell-1.4-0 1.4.1-2+b1
ii libicu57 57.1-5
ii libnspr4 2:4.12-6
ii libnss3 2:3.26.2-1
ii libpango-1.0-0 1.40.3-3
ii libpangocairo-1.0-0 1.40.3-3
ii libpangoft2-1.0-0 1.40.3-3
ii libpixman-1-0 0.34.0-1
ii libsqlite3-0 3.16.2-1
ii libstartup-notification0 0.12-4
ii libstdc++6 6.3.0-5
ii libvpx4 1.6.1-2
ii libx11-6 2:1.6.4-2
ii libxcomposite1 1:0.4.4-2
ii libxdamage1 1:1.1.4-2+b1
ii libxext6 2:1.3.3-1
ii libxfixes3 1:5.0.3-1
ii libxrender1 1:0.9.10-1
ii libxt6 1:1.1.5-1
ii psmisc 22.21-2.1+b1
ii zlib1g 1:1.2.8.dfsg-4
Versions of packages icedove recommends:
ii hunspell-en-au [hunspell-dictionary] 1:5.2.4-1
ii hunspell-en-gb [hunspell-dictionary] 1:5.2.4-1
pn iceowl-extension <none>
Versions of packages icedove suggests:
ii apparmor 2.11.0-2
ii fonts-lyx 2.2.2-1
ii libgssapi-krb5-2 1.15-1
-- Configuration Files:
-- no debconf information
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_NZ.utf8, LC_CTYPE=en_NZ.utf8 (charmap=UTF-8) (ignored: LC_ALL
set to en_NZ.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages icedove depends on:
ii debianutils 4.8.1
ii fontconfig 2.11.0-6.7
ii libasound2 1.1.2-1
ii libatk1.0-0 2.22.0-1
ii libc6 2.24-8
ii libcairo2 1.14.8-1
ii libdbus-1-3 1.10.14-1
ii libdbus-glib-1-2 0.108-2
ii libevent-2.0-5 2.0.21-stable-2.1
ii libffi6 3.2.1-6
ii libfontconfig1 2.11.0-6.7
ii libfreetype6 2.6.3-3+b1
ii libgcc1 1:6.3.0-5
ii libgdk-pixbuf2.0-0 2.36.3-1
ii libglib2.0-0 2.50.2-2
ii libgtk2.0-0 2.24.31-1
ii libhunspell-1.4-0 1.4.1-2+b1
ii libicu57 57.1-5
ii libnspr4 2:4.12-6
ii libnss3 2:3.26.2-1
ii libpango-1.0-0 1.40.3-3
ii libpangocairo-1.0-0 1.40.3-3
ii libpangoft2-1.0-0 1.40.3-3
ii libpixman-1-0 0.34.0-1
ii libsqlite3-0 3.16.2-1
ii libstartup-notification0 0.12-4
ii libstdc++6 6.3.0-5
ii libvpx4 1.6.1-2
ii libx11-6 2:1.6.4-2
ii libxcomposite1 1:0.4.4-2
ii libxdamage1 1:1.1.4-2+b1
ii libxext6 2:1.3.3-1
ii libxfixes3 1:5.0.3-1
ii libxrender1 1:0.9.10-1
ii libxt6 1:1.1.5-1
ii psmisc 22.21-2.1+b1
ii zlib1g 1:1.2.8.dfsg-4
Versions of packages icedove recommends:
ii hunspell-en-au [hunspell-dictionary] 1:5.2.4-1
ii hunspell-en-gb [hunspell-dictionary] 1:5.2.4-1
pn iceowl-extension <none>
Versions of packages icedove suggests:
ii apparmor 2.11.0-2
ii fonts-lyx 2.2.2-1
ii libgssapi-krb5-2 1.15-1
-- Configuration Files:
/etc/apparmor.d/usr.bin.icedove changed [not included]
-- no debconf information
