Hi,
Am 07.08.19 um 19:42 schrieb Karsten:
Hello Carsten,
thanks for the quick response.
Am 06.08.19 um 11:42 schrieb Carsten Schoenert:
Have you tried to look also in /var/log/messages as the user did in this
bug report?
No - but i checked the log now.
(I am working still under Debian 8, because Debian 9 did not work in
many details and now Debian 10 is not easy too.) >
I found messages like
kernel: [ 151.328463] audit: type=1400 audit(1564927035.263:69): apparmor="DENIED"
operation="file_lock"
profile="thunderbird"
name="/srv/ssd3/home/karsten/.thunderbird/3isadt6o.default/.parentlock" pid=3065
comm="thunderbird" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000
kernel: [ 156.908627] audit: type=1400 audit(1564927040.843:119): apparmor="DENIED"
operation="chmod"
profile="thunderbird" name="/srv/ssd3/var/cache/fontconfig/" pid=3065 comm="thunderbird"
requested_mask="w"
denied_mask="w" fsuid=1000 ouid=0
kernel: [ 156.908739] audit: type=1400 audit(1564927040.843:120): apparmor="DENIED"
operation="link"
profile="thunderbird"
name="/srv/ssd3/home/karsten/.cache/fontconfig/2e755eb509a594ba7adde982574983b5-le64.cache-7.LCK"
pid=3065 comm="thunderbird" requested_mask="l" denied_mask="l" fsuid=1000
ouid=1000
target="/srv/ssd3/home/karsten/.cache/fontconfig/2e755eb509a594ba7adde982574983b5-le64.cache-7.TMP-SYpvSP"
@Vincas
I guess the user need to modify the default AppArmor configuration by
adding something new to /etc/apparmor.d/tunable/home.d/?
Could you please give some advise what Karsten needs to do here? I will
add something generic later to the wiki site for Thunderbird within the
Debian wiki based on this.
...
Hmm - there is a symbolic link pointing from the SSD to the home
directory of the HDD for mass data storage. > Is this the reason?
Yes, as the AA profile is basically based on the schema
'/home/$username' for the home directories and not something different
schema here. Ulrike has ansewered this question in the bug report you
mentioned in the initial bug report from you.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928178#24
Before the was never a problem with it.
Everything after KDE 4.14.2 seems to get more and more complicated
and not reliable any more ...
Yes and no, the IT world will always move on and also invent new things.
So you need to keep track of this or you will see "problems" everythere.
You have installed and enabled the apparmor package, I'm quite sure you
also have a enabled AppArmor profile for Thunderbird.
I never done something - i only did make a fresh install of Debian 9
and upgraded it to Debian 10 in the hope the bugs will disappear.
The problem you see here is just a issue if you look at this from a
specific angle.
And more, if you have installed a new Debian 9 setup you should normally
don't see any activated AA profile for Thunderbird! We never have
shipped any activated AA profile for Debian stable. So I really
wondering how you came to an active AA TB profile.
Many things that didn't work are O.K. now, but there are new things
not working.
Isn't this normal life?
Before i never care about what AppArmor is.
Can i deactivate it?
Of course you can, how to deactivate the AA profile for TB I've written
further done in my previous email. If you globally don't care about
AppArmor you can it simply remove from you pc oder switch of the
automatic start. You would have find the requirend info about this
within the linked Debian Wiki site about AppArmor.
https://wiki.debian.org/AppArmor/HowToUse#Disable_AppArmor
...
I hope the log entries above will fullfill it.
Any hope to fix this?
Yes, the log tells us your home directory isn't the normal one that's
typically used. Fixing is not difficult, but you will need to tweak you
local configuration, at least tell AppArmor that the home directories
have a different root.--
---
Regards
Carsten
