Package: thunderbird
Version: 1:60.4.0-1
Severity: minor
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Whenever a calendar reminder is displaying, Thunderbird is flooding my
logs with apparmor denials:
Feb 9 16:20:34 Watt kernel: [518027.774746] audit: type=1400
audit(1549747234.261:2371): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/mime.cache"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:20:34 Watt kernel: [518027.774759] audit: type=1400
audit(1549747234.261:2372): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/globs2" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:34 Watt kernel: [518027.774761] audit: type=1400
audit(1549747234.261:2373): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/magic" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:34 Watt kernel: [518027.774764] audit: type=1400
audit(1549747234.261:2374): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/aliases" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:34 Watt kernel: [518027.774765] audit: type=1400
audit(1549747234.261:2375): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/subclasses"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:20:34 Watt kernel: [518027.774768] audit: type=1400
audit(1549747234.261:2376): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/icons" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:34 Watt kernel: [518027.774770] audit: type=1400
audit(1549747234.261:2377): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/generic-icons"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905303] audit: type=1400
audit(1549747248.393:2378): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/mime.cache"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905317] audit: type=1400
audit(1549747248.393:2379): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/globs2" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905319] audit: type=1400
audit(1549747248.393:2380): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/magic" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905321] audit: type=1400
audit(1549747248.393:2381): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/aliases" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905323] audit: type=1400
audit(1549747248.393:2382): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/subclasses"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905325] audit: type=1400
audit(1549747248.393:2383): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/icons" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:20:48 Watt kernel: [518041.905327] audit: type=1400
audit(1549747248.393:2384): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/generic-icons"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691464] audit: type=1400
audit(1549747267.178:2385): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/mime.cache"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691471] audit: type=1400
audit(1549747267.178:2386): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/globs2" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691474] audit: type=1400
audit(1549747267.178:2387): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/magic" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691484] audit: type=1400
audit(1549747267.178:2388): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/aliases" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691492] audit: type=1400
audit(1549747267.178:2389): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/subclasses"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691500] audit: type=1400
audit(1549747267.178:2390): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/icons" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:07 Watt kernel: [518060.691508] audit: type=1400
audit(1549747267.178:2391): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/generic-icons"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072318] audit: type=1400
audit(1549747275.562:2392): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/mime.cache"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072333] audit: type=1400
audit(1549747275.562:2393): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/globs2" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072335] audit: type=1400
audit(1549747275.562:2394): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/magic" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072337] audit: type=1400
audit(1549747275.562:2395): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/aliases" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072339] audit: type=1400
audit(1549747275.562:2396): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/subclasses"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072341] audit: type=1400
audit(1549747275.562:2397): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/icons" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:21:15 Watt kernel: [518069.072344] audit: type=1400
audit(1549747275.562:2398): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/generic-icons"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815160] audit: type=1400
audit(1549747328.303:2399): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/mime.cache"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815174] audit: type=1400
audit(1549747328.303:2400): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/globs2" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815176] audit: type=1400
audit(1549747328.303:2401): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/magic" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815178] audit: type=1400
audit(1549747328.303:2402): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/aliases" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815180] audit: type=1400
audit(1549747328.303:2403): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/subclasses"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815182] audit: type=1400
audit(1549747328.303:2404): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/icons" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:08 Watt kernel: [518121.815184] audit: type=1400
audit(1549747328.303:2405): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/generic-icons"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872726] audit: type=1400
audit(1549747333.359:2406): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/mime.cache"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872739] audit: type=1400
audit(1549747333.359:2407): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/globs2" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872741] audit: type=1400
audit(1549747333.359:2408): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/magic" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872743] audit: type=1400
audit(1549747333.359:2409): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/aliases" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872746] audit: type=1400
audit(1549747333.359:2410): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/subclasses"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872748] audit: type=1400
audit(1549747333.359:2411): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/icons" pid=4245
comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Feb 9 16:22:13 Watt kernel: [518126.872750] audit: type=1400
audit(1549747333.359:2412): apparmor="DENIED" operation="open"
profile="thunderbird" name="/home/anthony/.local/share/mime/generic-icons"
pid=4245 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
The journal has 264 lines of this in the last hour alone (during which
the machine was sitting idle, untouched, but Thunderbird was displaying
a calendar reminder)
I added this, seems reasonable for Thunderbird to read the MIME
database:
diff --git a/apparmor.d/usr.bin.thunderbird b/apparmor.d/usr.bin.thunderbird
index b5c6251..bbf11be 100644
- --- a/apparmor.d/usr.bin.thunderbird
+++ b/apparmor.d/usr.bin.thunderbird
@@ -99,6 +99,9 @@ profile thunderbird @{thunderbird_executable} {
@{PROC}/[0-9]*/net/wireless r,
@{PROC}/[0-9]*/net/arp r,
+ # local - more MIME stuff
+ owner @{HOME}/.local/share/mime/** r,
+
# should maybe be in abstractions
/etc/ r,
/etc/mime.types r,
- -- System Information:
Debian Release: buster/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'stable'), (130,
'unstable-debug'), (130, 'unstable'), (120, 'experimental-debug'), (120,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages thunderbird depends on:
ii debianutils 4.8.6.1
ii fontconfig 2.13.1-2
ii libatk1.0-0 2.30.0-2
ii libc6 2.28-5
ii libcairo-gobject2 1.16.0-2
ii libcairo2 1.16.0-2
ii libdbus-1-3 1.12.12-1
ii libdbus-glib-1-2 0.110-4
ii libevent-2.1-6 2.1.8-stable-4
ii libffi6 3.2.1-9
ii libfontconfig1 2.13.1-2
ii libfreetype6 2.9.1-3
ii libgcc1 1:8.2.0-15
ii libgdk-pixbuf2.0-0 2.38.0+dfsg-7
ii libglib2.0-0 2.58.2-3
ii libgtk-3-0 3.24.4-1
ii libgtk2.0-0 2.24.32-3
ii libhunspell-1.7-0 1.7.0-2
ii libicu63 63.1-6
ii libjsoncpp1 1.7.4-3
ii libnspr4 2:4.20-1
ii libnss3 2:3.41-1
ii libpango-1.0-0 1.42.4-6
ii libpangocairo-1.0-0 1.42.4-6
ii libpangoft2-1.0-0 1.42.4-6
ii libsqlite3-0 3.26.0+fossilbc891ac6b-2
ii libstartup-notification0 0.12-6
ii libstdc++6 8.2.0-15
ii libvpx5 1.7.0-3
ii libx11-6 2:1.6.7-1
ii libx11-xcb1 2:1.6.7-1
ii libxcb-shm0 1.13.1-2
ii libxcb1 1.13.1-2
ii libxext6 2:1.3.3-1+b2
ii libxrender1 1:0.9.10-1
ii libxt6 1:1.1.5-1
ii psmisc 23.2-1
ii x11-utils 7.7+4
ii zlib1g 1:1.2.11.dfsg-1
Versions of packages thunderbird recommends:
ii hunspell-en-us [hunspell-dictionary] 1:2018.04.16-1
ii lightning 1:60.4.0-1
Versions of packages thunderbird suggests:
ii apparmor 2.13.2-7
ii fonts-lyx 2.3.2-1
ii libgssapi-krb5-2 1.17-1
- -- Configuration Files:
/etc/apparmor.d/usr.bin.thunderbird changed [not included]
- -- debconf information excluded
-----BEGIN PGP SIGNATURE-----
iHMEARECADMWIQTlAc7j4DAtSNRJJ0z7P4jCVepZ/gUCXF9IUhUcYW50aG9ueUBk
ZXJvYmVydC5uZXQACgkQ+z+IwlXqWf6IegCfXkaTuWJoHweH9v+Ot/FXISZaa/AA
ninJdCJi/IE+3ones2EA7+uUJYMh
=r2Ca
-----END PGP SIGNATURE-----
