Your message dated Sun, 11 Feb 2018 16:23:54 +0100
with message-id <[email protected]>
and subject line Re: Bug#886964: thunderbird: Thunderbird blocked by AppArmor
without intervention.
has caused the Debian Bug report #886964,
regarding AppArmor: profile doesn't allow to access Acrobat Reader
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
886964: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886964
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: thunderbird
Version: 1:52.5.2-2
Severity: important
Dear Maintainer,
Trying to start thunderbird fails silently. Starting from the console shows
this:
ExceptionHandler::GenerateDump cloned child 1829
ExceptionHandler::SendContinueSignalToChild sent continue signal to child
ExceptionHandler::WaitForContinueSignal waiting for continue signal...
Took me a while to figure out what was going on. I found some people
mentionning Apparmor while searching the web and in /var/log/syslog, I found
that:
Jan 11 09:06:18 flare kernel: [60207.044643] audit: type=1400
audit(1515657978.983:138): apparmor="DENIED" operation="file_mmap"
profile="thunderbird" name="/tmp/.glXWcTtR" pid=534 comm="thunderbird"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
Jan 11 09:06:18 flare kernel: [60207.044646] audit: type=1400
audit(1515657978.983:139): apparmor="DENIED" operation="file_mmap"
profile="thunderbird" name="/tmp/.glXWcTtR" pid=534 comm="thunderbird"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
Jan 11 09:06:18 flare kernel: [60207.044657] audit: type=1400
audit(1515657978.983:140): apparmor="DENIED" operation="mkdir"
profile="thunderbird" name="/home/nab.nv/" pid=534 comm="thunderbird"
requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Disabling the AppArmor profile for thunderbird fixed the bug:
$ sudo aa-disable /etc/apparmor.d/usr.bin.thunderbird
I don't really know about apparmor and didn't change any of it's
configurations, I think it came with recommendation.
Looking at various bugs, it seems like the profile shouldn't be active.
I don't have the /etc/apparmor.d/disable/usr.bin.thunderbird mentioned in
README.apparmor.
I update regularly (couple of times a week), but don't restart to often, I
usually put the machine to sleep. And don't restart thunderbird often either,
in that case. So I don't know exaclty when the change that provoked this
appeared. But I think I did restart since the last thunderbird updates (26
dec). And restarted yesterday, and the issue appeared.
So it looks there is an issue with the apparmor profile and with the way the
disabling and enabling of it happens. I have a fairly bif .thunderbird (about
8GB), maybe that also started it. Mentionning this because it seems to try to
mmap something.
Tell me if you need additional information or if there is something I should
try.
Urs
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.14.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages thunderbird depends on:
ii debianutils 4.8.4
ii fontconfig 2.12.6-0.1
ii libatk1.0-0 2.26.1-2
ii libc6 2.26-2
ii libcairo-gobject2 1.15.8-3
ii libcairo2 1.15.8-3
ii libdbus-1-3 1.12.2-1
ii libdbus-glib-1-2 0.108-3
ii libevent-2.1-6 2.1.8-stable-4
ii libffi6 3.2.1-8
ii libfontconfig1 2.12.6-0.1
ii libfreetype6 2.8.1-1
ii libgcc1 1:7.2.0-19
ii libgdk-pixbuf2.0-0 2.36.11-1
ii libglib2.0-0 2.54.3-1
ii libgtk-3-0 3.22.26-2
ii libhunspell-1.6-0 1.6.2-1
ii libpango-1.0-0 1.40.14-1
ii libpangocairo-1.0-0 1.40.14-1
ii libpangoft2-1.0-0 1.40.14-1
ii libpixman-1-0 0.34.0-2
ii libstartup-notification0 0.12-5
ii libstdc++6 7.2.0-19
ii libvpx4 1.6.1-3
ii libx11-6 2:1.6.4-3
ii libx11-xcb1 2:1.6.4-3
ii libxcb-shm0 1.12-1
ii libxcb1 1.12-1
ii libxcomposite1 1:0.4.4-2
ii libxdamage1 1:1.1.4-3
ii libxext6 2:1.3.3-1+b2
ii libxfixes3 1:5.0.3-1
ii libxrender1 1:0.9.10-1
ii libxt6 1:1.1.5-1
ii psmisc 23.1-1
ii x11-utils 7.7+3+b1
ii zlib1g 1:1.2.8.dfsg-5
Versions of packages thunderbird recommends:
ii hunspell-de-de [hunspell-dictionary] 20161207-3
ii hunspell-en-gb [hunspell-dictionary] 1:6.0.0~rc1-1
ii hunspell-en-us [hunspell-dictionary] 1:2017.08.24
ii lightning 1:52.5.2-2
ii myspell-fr [myspell-dictionary] 1.4-27
Versions of packages thunderbird suggests:
ii apparmor 2.11.1-4
ii fonts-lyx 2.2.3-2
ii libgssapi-krb5-2 1.15.2-2
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1:52.6.0-1
On Sun, Feb 11, 2018 at 01:56:02PM +0200, Vincas Dargis wrote:
> On Thu, 11 Jan 2018 10:11:07 +0100 Urs Schroffenegger
> <[email protected]> wrote:
>
> > Jan 11 09:06:18 flare kernel: [60207.044643] audit: type=1400
> > audit(1515657978.983:138): apparmor="DENIED" operation="file_mmap"
> > profile="thunderbird" name="/tmp/.glXWcTtR" pid=534 comm="thunderbird"
> > requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
> > Jan 11 09:06:18 flare kernel: [60207.044646] audit: type=1400
> > audit(1515657978.983:139): apparmor="DENIED" operation="file_mmap"
> > profile="thunderbird" name="/tmp/.glXWcTtR" pid=534 comm="thunderbird"
> > requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
> > Jan 11 09:06:18 flare kernel: [60207.044657] audit: type=1400
> > audit(1515657978.983:140): apparmor="DENIED" operation="mkdir"
> > profile="thunderbird" name="/home/nab.nv/" pid=534 comm="thunderbird"
> > requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
>
>
> These `.gl*` and `/home/nab.nv/` are irrelevant here, it's NVIDIA-related
> stuff that will be fixed after some discussion. [0]
>
> > I use version 52.4.0-1
>
> I'm pretty sure your issue would be fixed if you update to 52.6 (or event to
> 54.5 for that matter):
>
> https://salsa.debian.org/mozilla-team/thunderbird/blob/debian/1%2552.6.0-1_deb9u1/debian/apparmor/usr.bin.thunderbird#L33
>
> It should really allow to launch Acrobat.
right, we missed to add a Closing on the changelog so the BTS don't know
this report is fixed.
So I'm closing the report by this email, unfortunately users tend to not
give feedback in case the reported issue is fixed.
If needed the bug report can easily be reopen.
Regards
Carsten
--- End Message ---
