On 2/12/2026 11:37 AM, Frederic Peters wrote: > I wrote: > >>I'm available for anything that would help debugging this. > > Looking further (in my case) it's related to apparmor, > > kernel: audit: type=1400 audit(1770913688.152:456): apparmor="DENIED" > operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" > pid=34166 comm="blocking-2" requested_mask="x" denied_mask="x" fsuid=1000 > ouid=0 > > Switching evince to complain mode (aa-complain > /etc/apparmor.d/usr.bin.evince) > allowed it to start. > > Shawn, maybe aa-complain /etc/apparmor.d/usr.bin.thunderbird would fix > it for you? (aa-complain is part of apparmor-utils). > > > Frederic > >
I am not the reporter of this bug (Shawn) but I am seeing the exact same problem with Thunderbird on sid after the gdk-pixbuf+glycin transition. The aa-complain workaround does fix Thunderbird on sid on my box. Thanks, Frederic! FWIW, here are the related apparmor messages I am getting after setting apparmor complain mode for Thunderbird, as it relates to glycin loaders: test@debian:~$ sudo journalctl -b --no-pager | grep audit | grep thunderbird | grep glycin Feb 14 13:38:31 debian kernel: audit: type=1400 audit(1771094311.887:1074): apparmor="ALLOWED" operation="exec" class="file" profile="thunderbird" name="/usr/libexec/glycin-loaders/2+/glycin-svg" pid=7225 comm="gly-hdl-loader" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-svg" Feb 14 13:38:31 debian kernel: audit: type=1400 audit(1771094311.887:1075): apparmor="ALLOWED" operation="file_mmap" class="file" profile="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-svg" name="/usr/libexec/glycin-loaders/2+/glycin-svg" pid=7225 comm="glycin-svg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Feb 14 13:38:31 debian kernel: audit: type=1400 audit(1771094311.887:1076): apparmor="ALLOWED" operation="file_mmap" class="file" profile="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-svg" name="/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2" pid=7225 comm="glycin-svg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Feb 14 13:39:02 debian kernel: audit: type=1400 audit(1771094342.068:1271): apparmor="ALLOWED" operation="signal" class="signal" profile="thunderbird" pid=7085 comm="gly-global-exec" requested_mask="send" denied_mask="send" signal=kill peer="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-image-rs" Feb 14 13:39:07 debian kernel: audit: type=1400 audit(1771094347.180:1272): apparmor="ALLOWED" operation="signal" class="signal" profile="thunderbird" pid=7085 comm="gly-global-exec" requested_mask="send" denied_mask="send" signal=kill peer="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-svg" Feb 14 13:42:05 debian kernel: audit: type=1400 audit(1771094525.777:2390): apparmor="ALLOWED" operation="signal" class="signal" profile="thunderbird" pid=8238 comm="gly-global-exec" requested_mask="send" denied_mask="send" signal=kill peer="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-image-rs" Feb 14 13:42:06 debian kernel: audit: type=1400 audit(1771094526.261:2391): apparmor="ALLOWED" operation="signal" class="signal" profile="thunderbird" pid=8238 comm="gly-global-exec" requested_mask="send" denied_mask="send" signal=kill peer="thunderbird//null-/usr/libexec/glycin-loaders/2+/glycin-svg" test@debian:~$ Thanks again, Chuck, a Debian tester
