Hello Vincas,

one more AppArmor thing you could please have a look at.

Thanks!

Am 20.09.18 um 22:53 schrieb Anthony DeRobertis:
> Package: thunderbird
> Version: 1:60.0-3~deb9u1
> Severity: normal
> File: /etc/apparmor.d/usr.bin.thunderbird
> 
> I got these in my log:
> 
> Sep 19 20:02:42 Watt kernel: [9950821.734919] audit: type=1400 
> audit(1537401762.512:297): apparmor="DENIED" operation="open" 
> profile="thunderbird" name="/home/anthony/.mailcap" pid=9593 
> comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Sep 19 20:02:43 Watt kernel: [9950822.548807] audit: type=1400 
> audit(1537401763.328:298): apparmor="DENIED" operation="open" 
> profile="thunderbird" name="/home/anthony/.mailcap" pid=9593 
> comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> 
> would make sense to allow a mail program to read ~/.mailcap (and execute
> the programs found there, no idea how that's done in apparmor)
> 
> -- System Information:
> Debian Release: buster/sid
>   APT prefers testing-debug
>   APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'stable'), 
> (130, 'unstable-debug'), (130, 'unstable'), (120, 'experimental-debug'), 
> (120, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
> 
> Kernel: Linux 4.16.0-1-amd64 (SMP w/8 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
> LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/bash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
> 
> Versions of packages thunderbird depends on:
> ii  debianutils               4.8.6
> ii  fontconfig                2.13.0-5
> ii  libatk1.0-0               2.28.1-1
> ii  libc6                     2.27-6
> ii  libcairo-gobject2         1.15.12-1
> ii  libcairo2                 1.15.12-1
> ii  libdbus-1-3               1.12.10-1
> ii  libdbus-glib-1-2          0.110-3
> ii  libevent-2.0-5            2.0.21-stable-3
> ii  libffi6                   3.2.1-8
> ii  libfontconfig1            2.13.0-5
> ii  libfreetype6              2.8.1-2
> ii  libgcc1                   1:8.2.0-6
> ii  libgdk-pixbuf2.0-0        2.36.12-2
> ii  libglib2.0-0              2.56.1-2
> ii  libgtk-3-0                3.22.30-2
> ii  libgtk2.0-0               2.24.32-3
> ii  libjsoncpp1               1.7.4-3
> ii  libpango-1.0-0            1.42.4-1
> ii  libpangocairo-1.0-0       1.42.4-1
> ii  libpangoft2-1.0-0         1.42.4-1
> ii  libstartup-notification0  0.12-5
> ii  libstdc++6                8.2.0-6
> ii  libvpx4                   1.6.1-3+deb9u1
> ii  libx11-6                  2:1.6.6-1
> ii  libx11-xcb1               2:1.6.6-1
> ii  libxcb-shm0               1.13-3
> ii  libxcb1                   1.13-3
> ii  libxext6                  2:1.3.3-1+b2
> ii  libxrender1               1:0.9.10-1
> ii  libxt6                    1:1.1.5-1
> ii  psmisc                    23.1-1+b1
> ii  x11-utils                 7.7+4
> ii  zlib1g                    1:1.2.11.dfsg-1
> 
> Versions of packages thunderbird recommends:
> ii  hunspell-en-us [hunspell-dictionary]  1:2018.04.16-1
> ii  lightning                             1:60.0-3~deb9u1
> 
> Versions of packages thunderbird suggests:
> ii  apparmor          2.13-8
> ii  fonts-lyx         2.3.0-3
> ii  libgssapi-krb5-2  1.16-2
> 
> -- debconf information excluded

-- 
Regards
Carsten Schoenert

Reply via email to