Hello Carsten,

thanks for the quick response.

Am 06.08.19 um 11:42 schrieb Carsten Schoenert:
> Have you tried to look also in /var/log/messages as the user did in this
> bug report?

No - but i checked the log now.
(I am working still under Debian 8, because Debian 9 did not work in many 
details and now Debian 10 is not easy too.)

I found messages like

kernel: [  151.328463] audit: type=1400 audit(1564927035.263:69): 
apparmor="DENIED" operation="file_lock"
profile="thunderbird" 
name="/srv/ssd3/home/karsten/.thunderbird/3isadt6o.default/.parentlock" pid=3065
comm="thunderbird" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000

kernel: [  156.908627] audit: type=1400 audit(1564927040.843:119): 
apparmor="DENIED" operation="chmod"
profile="thunderbird" name="/srv/ssd3/var/cache/fontconfig/" pid=3065 
comm="thunderbird" requested_mask="w"
denied_mask="w" fsuid=1000 ouid=0

kernel: [  156.908739] audit: type=1400 audit(1564927040.843:120): 
apparmor="DENIED" operation="link"
profile="thunderbird" 
name="/srv/ssd3/home/karsten/.cache/fontconfig/2e755eb509a594ba7adde982574983b5-le64.cache-7.LCK"
pid=3065 comm="thunderbird" requested_mask="l" denied_mask="l" fsuid=1000 
ouid=1000
target="/srv/ssd3/home/karsten/.cache/fontconfig/2e755eb509a594ba7adde982574983b5-le64.cache-7.TMP-SYpvSP"

> The bug report you mentioned is about a thunderbird profile which is not
> directly placed in /home/$username/.thunderbird which AppArmor can't get
> handled correctly without further tuning.

Hmm - there is a symbolic link pointing from the SSD to the home directory of 
the HDD for mass data storage.
Is this the reason?

Before the was never a problem with it.
Everything after KDE 4.14.2 seems to get more and more complicated and not 
reliable any more ...

> You have installed and enabled the apparmor package, I'm quite sure you
> also have a enabled AppArmor profile for Thunderbird.

I never done something - i only did make a fresh install of Debian 9 and 
upgraded it to Debian 10 in the hope the bugs
will disappear.
Many things that didn't work are O.K. now, but there are new things not working.

Before i never care about what AppArmor is.
Can i deactivate it?

> The thunderbird package isn't installed with a enabled AA profile by
> default. Please check for some log entries in /v/l/messages about denied
> access. Append such log entries to this report.

I hope the log entries above will fullfill it.

Any hope to fix this?

>
> https://wiki.debian.org/AppArmor/Reportbug#Provide_logs_and_inspect_AppArmor.27s_state_on_the_system
>
> You can disable the TB AA profile if you are sure you don't want to
> AppArmor protection for TB by executing the following commandline:
>
>  $ [ -f /etc/apparmor.d/disable/usr.bin.thunderbird ] || ln -s 
> /etc/apparmor.d/usr.bin.thunderbird  
> /etc/apparmor.d/disable/usr.bin.thunderbird
>
> You will need to restart the apparmor package afterwards. But we would
> like to see the potential source for the blocking by AppArmor to fix and
> tune the existing profile.
>
>  $ sudo service apparmore restart

I can try this - must reboot first and save this steps outside Thunderbird.

I will report.

Cheers
karsten

>
> Regards
> Carsten
>

Reply via email to