On Sat, Feb 14, 2026 at 3:42 PM Debian Tester <[email protected]> wrote: > I am sure I did not enable the Thunderbird apparmor profile. Something did, > so from my perspective, the only question left for me is, what did enable > the Thunderbird apparmor profile on my boxes? If it was some install > script of some package in the Debian archive, then there could be some > pure Debian installations that do have the Thunderbird apparmor profile > enabled by default. Also, I am not convinced, based on a seven year-old > README file, that every pure Debian installation now, seven years later, > will have the Thunderbird apparmor profile disabled by default.
I don't think there's anything in Debian that re-enabled the profile. If your install is old enough, maybe it wasn't disabled when the change in the default happened. > I would suggest that, until the Thunderbird apparmor profile is fixed, that > the next update to Thunderbird or apparmor check to see it it is enabled, > and if it is, then it should be set to complain mode until the Thunderbird > apparmor profile is fixed. That was done once before. Someone would just need to update the version number to do it again: https://salsa.debian.org/mozilla-team/thunderbird/-/blob/debian/sid/debian/thunderbird.postinst#L72-81 Thank you, Jeremy Bícha
