On Sat, May 20, 2017 at 09:09:21AM -0700, Hong Xu wrote: > I switched apparmor to complain mode and it works now. Are you > suggesting that now the updated apparmor profile should address this issue?
I'm not that familiar with apparmor but the question is if the current apprarmor profile or thunderbird is preventing all the needed access. So you can look into the logs what's the reason why evince isn't called for example. Without a look into the respective logs the profile can't be expanded correctly. Please note also some info about apparmor for Thunderbird written in the Debian Wiki. https://wiki.debian.org/Thunderbird#AppArmor_profile https://wiki.debian.org/AppArmor/Debug Regards Carsten
