Bug#894907: marked as done ([thunderbird] apparmor denies access to ~/.gnupg/tofu.db)
Your message dated Sat, 19 May 2018 15:31:56 + with message-id and subject line Bug#894907: fixed in thunderbird 1:52.8.0-1 has caused the Debian Bug report #894907, regarding [thunderbird] apparmor denies access to ~/.gnupg/tofu.db to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 894907: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894907 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: thunderbird Version: 1:52.7.0-1 Severity: normal Dear maintainer, from time to time I was finding a gpg process consuming the 100% of one cpu. A Debian fellow mentioned me that maybe AppArmor could be the cause, so I dug into it a little bit and found that AppArmor is denying the access to gpg to the file ~/.gnupg/tofu.db. apparmor="DENIED" operation="file_lock" profile="thunderbird//gpg" name="/home/tin/.gnupg/tofu.db" pid=4245 comm="gpg" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000 I have added the following line into /etc/apparmor.d/usr.bin.thunderbird and it worked ok: @@ -248,6 +248,7 @@ owner @{HOME}/.gnupg/trustdb.gpg rw, owner @{HOME}/.gnupg/S.gpg-agent rw, owner @{HOME}/.gnupg/S.dirmngr rw, +owner @{HOME}/.gnupg/tofu.db rw, owner @{HOME}/.gnupg/*.{gpg,kbx}.{lock,tmp} rwl, owner @{HOME}/.gnupg/.gpg-*.lock rwl, owner @{HOME}/.gnupg/gnupg_spawn_*.lock rwl, -- -- TiN signature.asc Description: OpenPGP digital signature --- End Message --- --- Begin Message --- Source: thunderbird Source-Version: 1:52.8.0-1 We believe that the bug you reported is fixed in the latest version of thunderbird, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 894...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Carsten Schoenert (supplier of updated thunderbird package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 17 May 2018 21:04:15 +0200 Source: thunderbird Binary: thunderbird thunderbird-dev lightning calendar-google-provider thunderbird-l10n-all thunderbird-l10n-ar thunderbird-l10n-ast thunderbird-l10n-be thunderbird-l10n-bg thunderbird-l10n-bn-bd thunderbird-l10n-br thunderbird-l10n-ca thunderbird-l10n-cs thunderbird-l10n-da thunderbird-l10n-de thunderbird-l10n-dsb thunderbird-l10n-el thunderbird-l10n-en-gb thunderbird-l10n-es-ar thunderbird-l10n-es-es thunderbird-l10n-et thunderbird-l10n-eu thunderbird-l10n-fi thunderbird-l10n-fr thunderbird-l10n-fy-nl thunderbird-l10n-ga-ie thunderbird-l10n-gd thunderbird-l10n-gl thunderbird-l10n-he thunderbird-l10n-hr thunderbird-l10n-hsb thunderbird-l10n-hu thunderbird-l10n-hy-am thunderbird-l10n-id thunderbird-l10n-is thunderbird-l10n-it thunderbird-l10n-ja thunderbird-l10n-kab thunderbird-l10n-ko thunderbird-l10n-lt thunderbird-l10n-nb-no thunderbird-l10n-nl thunderbird-l10n-nn-no thunderbird-l10n-pa-in thunderbird-l10n-pl thunderbird-l10n-pt-br thunderbird-l10n-pt-pt thunderbird-l10n-rm thunderbird-l10n-ro thunderbird-l10n-ru thunderbird-l10n-si thunderbird-l10n-sk thunderbird-l10n-sl thunderbird-l10n-sq thunderbird-l10n-sr thunderbird-l10n-sv-se thunderbird-l10n-ta-lk thunderbird-l10n-tr thunderbird-l10n-uk thunderbird-l10n-vi thunderbird-l10n-zh-cn thunderbird-l10n-zh-tw lightning-l10n-ar lightning-l10n-ast lightning-l10n-be lightning-l10n-bg lightning-l10n-bn-bd lightning-l10n-br lightning-l10n-ca lightning-l10n-cs lightning-l10n-cy lightning-l10n-da lightning-l10n-de lightning-l10n-dsb lightning-l10n-el lightning-l10n-es-ar lightning-l10n-es-es lightning-l10n-en-gb lightning-l10n-et lightning-l10n-eu lightning-l10n-fi lightning-l10n-fr lightning-l10n-fy-nl lightning-l10n-ga-ie lightning-l10n-gd lightning-l10n-gl lightning-l10n-he lightning-l10n-hr lightning-l10n-hsb lightning-l10n-hu lightning-l10n-hy-am lightning-l10n-id lightning-l10n-is lightning-l10n-it lightning-l10n-ja lightning-l10n-kab lightning-l10n-ko lightning-l10n-lt lightning-l10n-nb-no lightning-l10n-nl lightning-l10n-nn-no lightning-l10n-pa-in lightning-l10n-pl lightning-l10n-pt-br lightning-l10n-pt-pt lightning-l10n-rm lightning-l10n-ro lightning-l10n-ru lightning-l10n-si lightning-l10n-sk lightning-l10n-
Bug#894907: marked as done ([thunderbird] apparmor denies access to ~/.gnupg/tofu.db)
Your message dated Mon, 09 Apr 2018 10:01:45 + with message-id and subject line Bug#894907: fixed in thunderbird 1:60.0~b2-1 has caused the Debian Bug report #894907, regarding [thunderbird] apparmor denies access to ~/.gnupg/tofu.db to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 894907: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894907 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems --- Begin Message --- Package: thunderbird Version: 1:52.7.0-1 Severity: normal Dear maintainer, from time to time I was finding a gpg process consuming the 100% of one cpu. A Debian fellow mentioned me that maybe AppArmor could be the cause, so I dug into it a little bit and found that AppArmor is denying the access to gpg to the file ~/.gnupg/tofu.db. apparmor="DENIED" operation="file_lock" profile="thunderbird//gpg" name="/home/tin/.gnupg/tofu.db" pid=4245 comm="gpg" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000 I have added the following line into /etc/apparmor.d/usr.bin.thunderbird and it worked ok: @@ -248,6 +248,7 @@ owner @{HOME}/.gnupg/trustdb.gpg rw, owner @{HOME}/.gnupg/S.gpg-agent rw, owner @{HOME}/.gnupg/S.dirmngr rw, +owner @{HOME}/.gnupg/tofu.db rw, owner @{HOME}/.gnupg/*.{gpg,kbx}.{lock,tmp} rwl, owner @{HOME}/.gnupg/.gpg-*.lock rwl, owner @{HOME}/.gnupg/gnupg_spawn_*.lock rwl, -- -- TiN signature.asc Description: OpenPGP digital signature --- End Message --- --- Begin Message --- Source: thunderbird Source-Version: 1:60.0~b2-1 We believe that the bug you reported is fixed in the latest version of thunderbird, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 894...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Carsten Schoenert (supplier of updated thunderbird package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 07 Apr 2018 11:12:37 +0200 Source: thunderbird Binary: thunderbird lightning calendar-google-provider thunderbird-l10n-all thunderbird-l10n-ar thunderbird-l10n-ast thunderbird-l10n-be thunderbird-l10n-bg thunderbird-l10n-br thunderbird-l10n-ca thunderbird-l10n-cs thunderbird-l10n-da thunderbird-l10n-de thunderbird-l10n-dsb thunderbird-l10n-el thunderbird-l10n-en-gb thunderbird-l10n-es-ar thunderbird-l10n-es-es thunderbird-l10n-et thunderbird-l10n-eu thunderbird-l10n-fi thunderbird-l10n-fr thunderbird-l10n-fy-nl thunderbird-l10n-ga-ie thunderbird-l10n-gd thunderbird-l10n-gl thunderbird-l10n-he thunderbird-l10n-hr thunderbird-l10n-hsb thunderbird-l10n-hu thunderbird-l10n-hy-am thunderbird-l10n-id thunderbird-l10n-is thunderbird-l10n-it thunderbird-l10n-ja thunderbird-l10n-kab thunderbird-l10n-kk thunderbird-l10n-ko thunderbird-l10n-lt thunderbird-l10n-ms thunderbird-l10n-nb-no thunderbird-l10n-nl thunderbird-l10n-nn-no thunderbird-l10n-pl thunderbird-l10n-pt-br thunderbird-l10n-pt-pt thunderbird-l10n-rm thunderbird-l10n-ro thunderbird-l10n-ru thunderbird-l10n-si thunderbird-l10n-sk thunderbird-l10n-sl thunderbird-l10n-sq thunderbird-l10n-sr thunderbird-l10n-sv-se thunderbird-l10n-tr thunderbird-l10n-uk thunderbird-l10n-vi thunderbird-l10n-zh-cn thunderbird-l10n-zh-tw lightning-l10n-ar lightning-l10n-ast lightning-l10n-be lightning-l10n-bg lightning-l10n-br lightning-l10n-ca lightning-l10n-cs lightning-l10n-cy lightning-l10n-da lightning-l10n-de lightning-l10n-dsb lightning-l10n-el lightning-l10n-es-ar lightning-l10n-es-es lightning-l10n-en-gb lightning-l10n-et lightning-l10n-eu lightning-l10n-fi lightning-l10n-fr lightning-l10n-fy-nl lightning-l10n-ga-ie lightning-l10n-gd lightning-l10n-gl lightning-l10n-he lightning-l10n-hr lightning-l10n-hsb lightning-l10n-hu lightning-l10n-hy-am lightning-l10n-id lightning-l10n-is lightning-l10n-it lightning-l10n-ja lightning-l10n-kab lightning-l10n-kk lightning-l10n-ko lightning-l10n-ms lightning-l10n-lt lightning-l10n-nb-no lightning-l10n-nl lightning-l10n-nn-no lightning-l10n-pl lightning-l10n-pt-br lightning-l10n-pt-pt lightning-l10n-rm lightning-l10n-ro lightning-l10n-ru lightning-l10n-si lightning-l10n-sk lightning-l10n-sl lightning-l10n-sr lightning-l10n-sq lightning-