Hi Peter,

Am 02.01.19 um 09:12 schrieb Peter Tuharsky:
> Hi, Carsten
> 
> Thank You for Your valuable input.
> 
> The only things I don't understand, how was AppArmor enabled, and how 
> was it working for years until the last update of kernel/TB/whatever; I 
> have symlinked home dir for long time now... Could be that only the last 
> TB update enabled it?

very very unlikely. We are in the middle of an ESR release and thus the
packaging typically itself isn't changing much.
The code responsible for this wasn't touched for over year now. But we
won't get new information on this what really did happen on your system.
Only if it is reproducible we would see if and were something is maybe
broken and not correctly working.

> Well, I could also try to report this to apparmor

No need for (in this special case), the problem that AppArmor isn't
following symlinks here is a known fact and the AppArmor people did know
this. More info on this can be found on the other report I've linked to.

> (and the freezing 
> problem to kernel team); as You can see, I am ready to report bugs. I 
> only doubt this could get anywhere, because I'm not so sawwy so to debug 
> kernel, and Apparmor's inability to process symlinks is a known 
> "wontfix" bug.

Well, the difficult and time consuming debugging work is more the
exception than the normal way and happily the Debian package maintainers
are mostly can do this more effective than the package users. On the
other hand documentation is mostly lacking or out of time (and for
maintainers probably some boring work :P ).

AppArmor is a suite with a lot aspects and corner cases. And
unfortunately some things are impossible with the current used version.

I'm always happy if users are coming up with improvements for
descriptions, readmes etc. Especially for the AppArmor.
So I want to say, it's not always the complicated things that need to be
done, with a POV on the classical users it's mostly a lack of
information and how to organize them. I like the Debian wiki and so we
have a page for Thunderbird there too and we can easily link this from
the readme files.

https://wiki.debian.org/Thunderbird

If you are interested to do any improvements at any thing please feel
free to do so.

-- 
Regards
Carsten Schoenert

Reply via email to