Hi Philipp,

Your bug reporting work is really appreciated, keep em coming!

On 2017-11-04 06:41 AM, Philipp Kern wrote:
> Package: thunderbird
> Version: 1:52.4.0-1
> X-Debbugs-Cc: [email protected], [email protected]
> 
> When trying to import a GPG key from the Enigmail per-message "Import
> Key" button I get AppArmor denials and the operation just hangs (with a
> pulsing progress bar - because it waits for the lock):
> 
> [172877.352188] audit: type=1400 audit(1509791941.615:303384):
> apparmor="DENIED" operation="link" profile="thunderbird//gpg"
> name="/home/pkern/.gnupg/pubring.kbx.lock" pid=14200 comm="gpg2"
> requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
> target="/home/pkern/.gnupg/.#lk0x0000559de00c2e10.desktop.kern.pm.14200"

Could you try with this:

# git diff -- usr.bin.thunderbird
diff --git a/apparmor.d/usr.bin.thunderbird b/apparmor.d/usr.bin.thunderbird
index 115de4a..6af9881 100644
--- a/apparmor.d/usr.bin.thunderbird
+++ b/apparmor.d/usr.bin.thunderbird
@@ -240,7 +240,7 @@ profile thunderbird /usr/lib/thunderbird/thunderbird {
     owner @{HOME}/.gnupg/ rw,
     owner @{HOME}/.gnupg/gpg.conf r,
     owner @{HOME}/.gnupg/random_seed rwk,
-    owner @{HOME}/.gnupg/pubring.gpg{,~} rw,
+    owner @{HOME}/.gnupg/pubring.* rwl,
     owner @{HOME}/.gnupg/secring.gpg rw,
     owner @{HOME}/.gnupg/trustdb.gpg rw,
     owner @{HOME}/.gnupg/S.gpg-agent rw,


Thanks,
Simon

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to