Hi!

On 30.04.19 09:31, Piviul wrote:
> Il 30/04/19 07:51, Carsten Schoenert ha scritto:

>> downgrading severity as AppArmor isn't officially supported and
>> activated for the Thunderbird package.
> but I'm not the one that activated apparmor for thunderbird: AFAIK in
> debian stretch (debian stable) the apparmor profile is enabled by default!

There are two things:

- installing and activating AppArmor
- activating a profile to confine a given software

The latter is sometimes done by packages but only takes effect if you
did the former.

In Stretch, AppArmor is not activated by default. Did you activate it
and use it for other software?

>> [...] The path to your profile looks unusual. In the past we had other
>> reports
>> that have show that AA isn't happy if the Thunderbird profile can't be
>> found in the typical folder.
> is unusual for local users but is a standard path for remote users where
> PCs are joined to a samba domain or where authentication is preformed
> remotely.

Your folder path was:
name="/home/DOMINIOCSA/psala/.thunderbird/5p9oab1n.default/.parentlock"

The issue is the "psala", that does not look like a standard path to me,
or is there a software which creates such a folder? And as you say below

> local users doesn't
> have problem using TB even with apparmor profile enabled.

So to me it sounds like a non-issue. You can add a local AppArmor file
for your setup, that would allow the path you're using. So you won't
have to disable the profile altogether. In summary, it does not look
like a bug in the AppArmor profile of Thunderbird at first glance.

Cheers!
Ulrike

Reply via email to