Am 19. Mai 2025 11:15:03 MESZ schrieb Laurent Bigonville <bi...@debian.org>:
>When opening a document, every time, I get a lot of apparmor denials
>regarding thunderbird (thunderbird is installad and used on my system)
>
>Looking at these it seems that libreoffice is trying to access the
>keyring from thunderbird and it's not allowed to:
Yes, that is known. It was written back then for firefix, never updated for
thunderbird (and neither for "newer" key?.db etc).
Those apparmor profiles once contributed are bit-rotting unfortunately and not
really that much maintained...
(...)
>So either that should be disabled or libreoffice should be allowed to
>access the home of thunderbird in read-only (I see that libreoffice is
>already allowed to open some files from firefox)
Yes.
>On my machine with thunderbird 1:138.0-1 from experimental, adding the
>following seems to solve the denials:
>
>@{HOME}/.thunderbird/profiles.ini r,
>@{HOME}/.thunderbird/*/key4.db wrk,
>@{HOME}/.thunderbird/*/cert9.db wrk,
Indeed.
There is no pressing need in this since all this is in complain mode only.