Package: thunderbird
Version: 1:68.0~b1-1
Severity: important
Tags: upstream
User: [email protected]
Usertags: modify-profile

Dear Maintainer,

Testing Thunderbird 68 from experimental produces spam of denials by AppArmor:
```
type=AVC msg=audit(1563637182.506:272): apparmor="DENIED" operation="mknod" 
profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.0" pid=2783 
comm="thunderbird" request
ed_mask="c" denied_mask="c" fsuid=1000 ouid=1000

type=AVC msg=audit(1563637182.570:273): apparmor="DENIED" operation="mknod" 
profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.1" pid=2783 
comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

type=AVC msg=audit(1563637182.622:274): apparmor="DENIED" operation="mknod" 
profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.2" pid=2783 
comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
...
```
Result is black window, no UI is visible, application is completely unusable.

Adding this rule fixes the issue:
```
owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw,
```

I will work for upstream patch to fix this.

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii  debianutils               4.8.6.3
ii  fontconfig                2.13.1-2
ii  libatk1.0-0               2.30.0-2
ii  libc6                     2.28-10
ii  libcairo-gobject2         1.16.0-4
ii  libcairo2                 1.16.0-4
ii  libdbus-1-3               1.12.16-1
ii  libdbus-glib-1-2          0.110-4
ii  libevent-2.1-6            2.1.8-stable-4
ii  libffi6                   3.2.1-9
ii  libfontconfig1            2.13.1-2
ii  libfreetype6              2.9.1-3
ii  libgcc1                   1:9.1.0-10
ii  libgdk-pixbuf2.0-0        2.38.1+dfsg-1
ii  libglib2.0-0              2.60.5-1
ii  libgtk-3-0                3.24.10-1
ii  libgtk2.0-0               2.24.32-3
ii  libicu63                  63.2-2
ii  libjsoncpp1               1.7.4-3
ii  libnspr4                  2:4.21-1
ii  libnss3                   2:3.45-1
ii  libpango-1.0-0            1.42.4-6
ii  libsqlite3-0              3.29.0-1
ii  libstartup-notification0  0.12-6
ii  libstdc++6                9.1.0-10
ii  libvpx5                   1.7.0-3
ii  libx11-6                  2:1.6.7-1
ii  libx11-xcb1               2:1.6.7-1
ii  libxcb-shm0               1.13.1-2
ii  libxcb1                   1.13.1-2
ii  libxext6                  2:1.3.3-1+b2
ii  libxrender1               1:0.9.10-1
ii  libxt6                    1:1.1.5-1+b3
ii  psmisc                    23.2-1
ii  x11-utils                 7.7+4
ii  zlib1g                    1:1.2.11.dfsg-1

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary]  1:2018.04.16-1
ii  lightning                             1:68.0~b1-1

Versions of packages thunderbird suggests:
ii  apparmor          2.13.3-2
pn  fonts-lyx         <none>
ii  libgssapi-krb5-2  1.17-5

-- Configuration Files:
/etc/apparmor.d/usr.bin.thunderbird changed [not included]

-- no debconf information

Reply via email to