On 2/14/2026 3:51 PM, Jeremy Bícha wrote: > On Sat, Feb 14, 2026 at 3:42 PM Debian Tester <[email protected]> wrote: > > I am sure I did not enable the Thunderbird apparmor profile. Something did, > > so from my perspective, the only question left for me is, what did enable > > the Thunderbird apparmor profile on my boxes? If it was some install > > script of some package in the Debian archive, then there could be some > > pure Debian installations that do have the Thunderbird apparmor profile > > enabled by default. Also, I am not convinced, based on a seven year-old > > README file, that every pure Debian installation now, seven years later, > > will have the Thunderbird apparmor profile disabled by default. > > I don't think there's anything in Debian that re-enabled the profile. > If your install is old enough, maybe it wasn't disabled when the > change in the default happened.
This is the likely explanation, since both my testing and sid installations date back to the days when Jessie was the stable version. > > > I would suggest that, until the Thunderbird apparmor profile is fixed, that > > the next update to Thunderbird or apparmor check to see it it is enabled, > > and if it is, then it should be set to complain mode until the Thunderbird > > apparmor profile is fixed. > > That was done once before. Someone would just need to update the > version number to do it again: > https://salsa.debian.org/mozilla-team/thunderbird/-/blob/debian/sid/debian/thunderbird.postinst#L72-81 > > Thank you, > Jeremy Bícha
