Simon Déziel has proposed merging
~sdeziel/apparmor-profiles/+git/apparmor-profiles:thunderbird-45-refresh into
apparmor-profiles:master.
Requested reviews:
AppArmor Developers (apparmor-dev)
For more details, see:
https://code.launchpad.net/~sdeziel/apparmor-profiles/+git/apparmor-profiles/+merge/301697
Support newer Thunderbird and allow accessing system emails
--
Your team AppArmor Developers is requested to review the proposed merge of
~sdeziel/apparmor-profiles/+git/apparmor-profiles:thunderbird-45-refresh into
apparmor-profiles:master.
diff --git a/ubuntu/16.04/usr.bin.thunderbird b/ubuntu/16.04/usr.bin.thunderbird
index 2e044fc..808b074 100644
--- a/ubuntu/16.04/usr.bin.thunderbird
+++ b/ubuntu/16.04/usr.bin.thunderbird
@@ -145,6 +145,9 @@ profile thunderbird /usr/lib/thunderbird/thunderbird {
owner @{HOME}/.cache/thunderbird/ rw,
owner @{HOME}/.cache/thunderbird/** rw,
+ # system emails
+ owner /var/mail/* rw,
+
#
# Extensions
# /usr/share/.../extensions/... is already covered by '/usr/** r', above.
@@ -229,6 +232,8 @@ profile thunderbird /usr/lib/thunderbird/thunderbird {
deny owner @{HOME}/.thunderbird/**/*.msf w,
deny owner @{HOME}/.cache/thunderbird/**/_CACHE_* w,
+ /usr/share/xul-ext/enigmail/chrome/enigmail.jar r,
+
# For smartcards?
/dev/bus/usb/ r,
/dev/bus/usb/[0-9]*/ r,
diff --git a/ubuntu/16.10/usr.bin.thunderbird b/ubuntu/16.10/usr.bin.thunderbird
index 2e044fc..808b074 100644
--- a/ubuntu/16.10/usr.bin.thunderbird
+++ b/ubuntu/16.10/usr.bin.thunderbird
@@ -145,6 +145,9 @@ profile thunderbird /usr/lib/thunderbird/thunderbird {
owner @{HOME}/.cache/thunderbird/ rw,
owner @{HOME}/.cache/thunderbird/** rw,
+ # system emails
+ owner /var/mail/* rw,
+
#
# Extensions
# /usr/share/.../extensions/... is already covered by '/usr/** r', above.
@@ -229,6 +232,8 @@ profile thunderbird /usr/lib/thunderbird/thunderbird {
deny owner @{HOME}/.thunderbird/**/*.msf w,
deny owner @{HOME}/.cache/thunderbird/**/_CACHE_* w,
+ /usr/share/xul-ext/enigmail/chrome/enigmail.jar r,
+
# For smartcards?
/dev/bus/usb/ r,
/dev/bus/usb/[0-9]*/ r,
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
