Hello Gerald,

On Sun, Mar 26, 2017 at 11:07:40AM -0700, Gerald Turner wrote:
... 
> The new AppArmor profile works - I restored the .icedove directory and
> .thunderbird symlink, overwrote /etc/apparmor.d/usr.bin.thunderbird with
> your attachment, reloaded apparmor, started thunderbird - runs fine.

Thanks for testing, so this chnage will be included into the next upload.

> Note however there are still those two /sys PCI device access denials
> mentioned earlier.  The device Thunderbird is trying to access happens
> to be my video card.

That's correct. You can use lspci to explore the IDs.

http://cromwell-intl.com/linux/sysfs.html

$ lspci -v -s "00:02.0"
00:02.0 VGA compatible controller: Intel Corporation HD Graphics 510 (rev 06) 
(prog-if 00 [VGA controller])
 ...

> Previous icedove packages probably did the same
> thing but I had never noticed.  Nevertheless Thunderbird works fine (and
> probably a good thing that it's WebGL-init or whatever is failing).

I've no clue what the reason is here, probably someting like you asuming. I
suggest to get in touch about this problem with the AppArmor people in
Debian. I'm sure this "problem" is also existing with Firefox for
example. So it's probably useful to open there a dedicated new bug
report.

https://wiki.debian.org/Thunderbird#AppArmor_profile

Regards
Carsten

Reply via email to