Hello Axel, On Sat, Jun 23, 2018 at 07:05:14PM +0200, Axel Beckert wrote: ... > Error: Access was denied while trying to open files in your profile > directory. > > I though couldn't find any such file using e.g. "find ~ -not -readable" > or "find ~ -not -user `id -un`". But I do have apparmor active, so it > might be related to that. > > Actually I found some related messages in the dmesg output > > [ 111.046491] audit: type=1400 audit(1529769721.595:112): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=5346 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 111.046520] audit: type=1400 audit(1529769721.595:113): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=5346 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 111.046578] audit: type=1400 audit(1529769721.595:114): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=5346 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 111.046608] audit: type=1400 audit(1529769721.595:115): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=5346 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 111.050583] audit: type=1400 audit(1529769721.599:116): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=5346 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 111.050672] audit: type=1400 audit(1529769721.599:117): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=5346 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 111.071629] audit: type=1400 audit(1529769721.619:118): apparmor="DENIED" > operation="mkdir" profile="thunderbird" > name="/run/user/1000/.unburden-abe/cache/thunderbird/" pid=5299 > comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000 > [ 111.517719] audit: type=1400 audit(1529769722.067:119): apparmor="DENIED" > operation="mknod" profile="thunderbird" > name="/run/user/1000/.unburden-abe/cache/fontconfig/2e755eb509a594ba7adde982574983b5-le64.cache-7.TMP-yAAa7a" > pid=5299 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 > ouid=1000 > [ 2214.053670] audit: type=1400 audit(1529771824.595:124): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=9409 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 2214.053707] audit: type=1400 audit(1529771824.595:125): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=9409 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 2214.053768] audit: type=1400 audit(1529771824.595:126): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=9409 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 2214.053804] audit: type=1400 audit(1529771824.595:127): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=9409 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 2214.056597] audit: type=1400 audit(1529771824.595:128): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=9409 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 2214.057319] audit: type=1400 audit(1529771824.595:129): apparmor="DENIED" > operation="open" profile="thunderbird" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=9409 > comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 2214.059413] audit: type=1400 audit(1529771824.599:130): apparmor="DENIED" > operation="mkdir" profile="thunderbird" > name="/run/user/1000/.unburden-abe/cache/thunderbird/" pid=9394 > comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000 > [ 2214.245650] audit: type=1400 audit(1529771824.787:131): apparmor="DENIED" > operation="mknod" profile="thunderbird" > name="/run/user/1000/.unburden-abe/cache/fontconfig/2e755eb509a594ba7adde982574983b5-le64.cache-7.TMP-tid84T" > pid=9394 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 > ouid=1000 > > This is likely from two tries to start thunderbird. > > I also checked /var/log/Xorg.0.log as well as ~/.xsession-errors, but I > found nothing which seems related or in the relevant time frame.
this at all is #900840. intrigeri has added a updated AppArmor profile for Thunderbird, unfortunately a few days after the release of Thunderbird 52.8.0-1. You should be able to fix this behavior by modify the AppArmor profile for Thunderbird. https://salsa.debian.org/mozilla-team/thunderbird/commit/cb643970b166e46b07fe38a67ae85dec5c9e3d1a The updated profile will be shipped with the next TB ESR version once upstream hase made it. Regards Carsten
