Am 30.04.19 um 16:00 schrieb Piviul: > Il 30/04/19 15:00, Carsten Schoenert ha scritto: >> [...] >> The AppArmor thingy isn't that intelligent and flexible to detect such >> cases. > but it was, because as I have told you, before recent updates > thunderbird has been working without any problems even with the apparmor > profile enabled.
I don't think so. :) You are on stable so no new features where added to apparmor by any update on the package. The last update was this one. > https://tracker.debian.org/news/937404/accepted-apparmor-2110-3deb9u2-source-amd64-all-into-proposed-updates-stable-new-proposed-updates/ This was introduced on 2018-03-02, this is more than a year ago. It's obviously not the fault of the apparmor package if now something isn't working anymore. And again, the AA profile for Thunderbird was never activated within the stable release and that's for a reason. The people of the Debian AppArmor packaging are knowing that there are things that don't work as wanted in some package, one of them is the Thunderbird package. User can switch on the profile but are then on their own. For sure you have looked into /usr/share/doc/thunderbird/README.apparmor to see the explanation behind that. >> And we don't know every corner case which might happen out there. >> And I don't want to add extra rules for such rare cases which will fit >> mostly just one person. > As I have told you every remote authentication (I don't think concern > only one person) save all remote users profile in a subfolder of the > home. Furthermore in my opinion, if you write a program you have to be > compatible with standard not compatible with habit that do you think > users or programmer should use. > > In my opinion you should investigate how apparmor expand the @{HOME} to > understand what is recently changed. No, I won't do that, or better I can't do that. My time is to limited to dig into such corner cases. I don't have a MS AD environment beside me nor have I some LDAP based environment to do any work here. I'm working on a volunteer base on the Thunderbird package like the people of the apparmor package too. I'm willing to help but this can only happen within a frame I can work on. And your case isn't something I can help. Simon has given a hint how to tune the expansion of ${HOME} within the apparmor environment. I'm happy to adjust the README file if someone is coming up with good suggestion. What make you sure the AA TB profile has ever worked and was *active*? In my eyes it can't have worked in the past as the current rules in the profile are to strict to work around the folder structure of your $HOME. -- Regards Carsten Schoenert
