Helllo,

Stephen, while we are discussing this, I'd like to give you an easy 
workaround:

Edit /etc/apparmor.d/tunables/alias and add this line:

    alias /tmp/ -> /run/user/1000/,

This will (additionally) allow /run/user/1000/ whenever a profile says 
/tmp/

If you need a solution that works for all users (and is a bit less 
strict because it only enforces that the directory name has to start 
with a digit)

    alias /tmp/ -> /run/user/[0-9]*/,


After adding the alias, reload all AppArmor profiles.

The alias will "fix" all profiles, not only the thunderbird profile.


Regards,

Christian Boltz

PS: Can someone who knows the Debian bugtracker better please tag this 
    bug so that we get notifications on pkg-apparmor?
-- 
Most languages allow you to shoot your own foot,
C just gives you a tank instead of a handgun ;-)
[Cristian Rodríguez in opensuse-factory]

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to