Package: thunderbird
Version: 1:52.5.0-1
Severity: normal
Control: tag -1 + upstream
User: [email protected]
Usertags: buggy-profile
X-Debbugs-Cc: [email protected]
Hi,
on current sid, after enabling/enforcing the (now disabled by default)
AppArmor profile and restarting Thunderbird, the Thunderbird process
runs unconfined. I think that's because
/usr/lib/thunderbird/thunderbird is now a symlink to thunderbird-bin.
This patch fixes it for me:
--- a/apparmor.d/usr.bin.thunderbird
+++ b/apparmor.d/usr.bin.thunderbird
@@ -8,7 +8,7 @@
#include <tunables/global>
-profile thunderbird /usr/lib/thunderbird/thunderbird {
+profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} {
#include <abstractions/audio>
#include <abstractions/aspell>
#include <abstractions/cups-client>
Cheers,
--
intrigeri
