Hello Douglas,
On Thu, Feb 02, 2017 at 09:01:45PM +1300, Douglas Bagnall wrote:
...
> Clinking on a url in an email fails to open the link in a browser
> because icedove is trying to open the link using exo-open, but
> apparmor is preventing this from working.
>
> As strace puts it:
>
> [pid 28502] execve("/usr/bin/exo-open", ["exo-open", "--launch",
> "WebBrowser", "https://lwn.net/current/";], [/* 66 vars */]) = -1 EACCES
> (Permission denied)
>
> Looking in /etc/apparmor.d, I found this incantation:
>
>
>
> --- /etc/apparmor.d/usr.bin.icedove~ 2017-01-11 08:03:25.000000000 +1300
> +++ /etc/apparmor.d/usr.bin.icedove 2017-02-02 20:21:19.178327290 +1300
> @@ -25,6 +25,12 @@
> #include <abstractions/ubuntu-browsers>
> #include <abstractions/ubuntu-helpers>
>
> + # For Xubuntu to launch the browser
> + /usr/bin/exo-open ixr,
> + /usr/lib/@{multiarch}/xfce4/exo-1/exo-helper-1 ixr,
> + /etc/xdg/xdg-xubuntu/xfce4/helpers.rc r,
> + /etc/xdg/xfce4/helpers.rc r,
> +
> # for crash reports?
> ptrace (read,trace) peer=@{profile_name},
>
> Adding those lines fixes it.
>
> I am sorry if this is a dupe, but I couldn't find anything else
> referring to the same cause (if that is the root cause).
thanks for providing a fix for the issue. We will merge this into one of
the next uploads.
@Ulrike
Would you point this issue upstream? Need we a also a update for the
profile of Thunderbird in Debian? If so could you provide a patch?
And, would you or someone else with the apparmor background create a
sentence about the Apparmor profile in Thunderbird within the new
Thunderbird wiki site?
https://wiki.debian.org/Thunderbird
Regards
Carsten
