On 10/31/2017 01:30 PM, Philipp Kern wrote: > I turned on AppArmor and Thunderbird stopped opening links for me. dmesg > has the following denial message: > > [ 3795.153239] audit: type=1400 audit(1509283418.100:64): > apparmor="DENIED" operation="exec" profile="thunderbird" > name="/opt/google/chrome-beta/google-chrome-beta" pid=31896 > comm="thunderbird" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 > > I think there needs to be some kind of defined way for browsers to be > allowed to be executed. I understand that I use a browser that is not in > the distribution, which makes this even more important. In this case the > browser is literally set as the xdg default: [...]
Note that this extends to generic URL handlers as well: [95946.493507] audit: type=1400 audit(1509454207.986:185): apparmor="DENIED" operation="exec" profile="thunderbird" name="/usr/bin/gobby-0.5" pid=6205 comm="thunderbird" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 (From an infinote:// URL in an email.) And I'd be surprised if Thunderbird were the only application with this problem. Kind regards Philipp Kern
signature.asc
Description: OpenPGP digital signature
