Your message dated Fri, 15 Apr 2022 17:53:56 +0200
with message-id <[email protected]>
and subject line Re: Bug#932557: thunderbird: AppArmor denies access to
/dev/shm/org.mozilla.ipc.* (for v68)
has caused the Debian Bug report #932557,
regarding thunderbird: AppArmor denies access to /dev/shm/org.mozilla.ipc.*
(for v68)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
932557: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932557
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: thunderbird
Version: 1:68.0~b1-1
Severity: important
Tags: upstream
User: [email protected]
Usertags: modify-profile
Dear Maintainer,
Testing Thunderbird 68 from experimental produces spam of denials by AppArmor:
```
type=AVC msg=audit(1563637182.506:272): apparmor="DENIED" operation="mknod"
profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.0" pid=2783
comm="thunderbird" request
ed_mask="c" denied_mask="c" fsuid=1000 ouid=1000
type=AVC msg=audit(1563637182.570:273): apparmor="DENIED" operation="mknod"
profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.1" pid=2783
comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
type=AVC msg=audit(1563637182.622:274): apparmor="DENIED" operation="mknod"
profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.2" pid=2783
comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
...
```
Result is black window, no UI is visible, application is completely unusable.
Adding this rule fixes the issue:
```
owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw,
```
I will work for upstream patch to fix this.
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1,
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages thunderbird depends on:
ii debianutils 4.8.6.3
ii fontconfig 2.13.1-2
ii libatk1.0-0 2.30.0-2
ii libc6 2.28-10
ii libcairo-gobject2 1.16.0-4
ii libcairo2 1.16.0-4
ii libdbus-1-3 1.12.16-1
ii libdbus-glib-1-2 0.110-4
ii libevent-2.1-6 2.1.8-stable-4
ii libffi6 3.2.1-9
ii libfontconfig1 2.13.1-2
ii libfreetype6 2.9.1-3
ii libgcc1 1:9.1.0-10
ii libgdk-pixbuf2.0-0 2.38.1+dfsg-1
ii libglib2.0-0 2.60.5-1
ii libgtk-3-0 3.24.10-1
ii libgtk2.0-0 2.24.32-3
ii libicu63 63.2-2
ii libjsoncpp1 1.7.4-3
ii libnspr4 2:4.21-1
ii libnss3 2:3.45-1
ii libpango-1.0-0 1.42.4-6
ii libsqlite3-0 3.29.0-1
ii libstartup-notification0 0.12-6
ii libstdc++6 9.1.0-10
ii libvpx5 1.7.0-3
ii libx11-6 2:1.6.7-1
ii libx11-xcb1 2:1.6.7-1
ii libxcb-shm0 1.13.1-2
ii libxcb1 1.13.1-2
ii libxext6 2:1.3.3-1+b2
ii libxrender1 1:0.9.10-1
ii libxt6 1:1.1.5-1+b3
ii psmisc 23.2-1
ii x11-utils 7.7+4
ii zlib1g 1:1.2.11.dfsg-1
Versions of packages thunderbird recommends:
ii hunspell-en-us [hunspell-dictionary] 1:2018.04.16-1
ii lightning 1:68.0~b1-1
Versions of packages thunderbird suggests:
ii apparmor 2.13.3-2
pn fonts-lyx <none>
ii libgssapi-krb5-2 1.17-5
-- Configuration Files:
/etc/apparmor.d/usr.bin.thunderbird changed [not included]
-- no debconf information
--- End Message ---
--- Begin Message ---
Version: 1:60.8.0-2
This issue was fixed already long ago. So clean up the list of bug
reports
Regards
Carsten
Am Sat, Jul 20, 2019 at 06:56:27PM +0300 schrieb Vincas Dargis:
> Package: thunderbird
> Version: 1:68.0~b1-1
> Severity: important
> Tags: upstream
> User: [email protected]
> Usertags: modify-profile
>
> Dear Maintainer,
>
> Testing Thunderbird 68 from experimental produces spam of denials by AppArmor:
> ```
> type=AVC msg=audit(1563637182.506:272): apparmor="DENIED" operation="mknod"
> profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.0" pid=2783
> comm="thunderbird" request
> ed_mask="c" denied_mask="c" fsuid=1000 ouid=1000
>
> type=AVC msg=audit(1563637182.570:273): apparmor="DENIED" operation="mknod"
> profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.1" pid=2783
> comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
>
> type=AVC msg=audit(1563637182.622:274): apparmor="DENIED" operation="mknod"
> profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.2" pid=2783
> comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
> ...
> ```
> Result is black window, no UI is visible, application is completely unusable.
>
> Adding this rule fixes the issue:
> ```
> owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw,
> ```
>
> I will work for upstream patch to fix this.
>
> -- System Information:
> Debian Release: bullseye/sid
> APT prefers unstable-debug
> APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1,
> 'experimental-debug'), (1, 'experimental')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.19.0-5-amd64 (SMP w/8 CPU cores)
> Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
> LANGUAGE=en_US:en (charmap=UTF-8)
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages thunderbird depends on:
> ii debianutils 4.8.6.3
> ii fontconfig 2.13.1-2
> ii libatk1.0-0 2.30.0-2
> ii libc6 2.28-10
> ii libcairo-gobject2 1.16.0-4
> ii libcairo2 1.16.0-4
> ii libdbus-1-3 1.12.16-1
> ii libdbus-glib-1-2 0.110-4
> ii libevent-2.1-6 2.1.8-stable-4
> ii libffi6 3.2.1-9
> ii libfontconfig1 2.13.1-2
> ii libfreetype6 2.9.1-3
> ii libgcc1 1:9.1.0-10
> ii libgdk-pixbuf2.0-0 2.38.1+dfsg-1
> ii libglib2.0-0 2.60.5-1
> ii libgtk-3-0 3.24.10-1
> ii libgtk2.0-0 2.24.32-3
> ii libicu63 63.2-2
> ii libjsoncpp1 1.7.4-3
> ii libnspr4 2:4.21-1
> ii libnss3 2:3.45-1
> ii libpango-1.0-0 1.42.4-6
> ii libsqlite3-0 3.29.0-1
> ii libstartup-notification0 0.12-6
> ii libstdc++6 9.1.0-10
> ii libvpx5 1.7.0-3
> ii libx11-6 2:1.6.7-1
> ii libx11-xcb1 2:1.6.7-1
> ii libxcb-shm0 1.13.1-2
> ii libxcb1 1.13.1-2
> ii libxext6 2:1.3.3-1+b2
> ii libxrender1 1:0.9.10-1
> ii libxt6 1:1.1.5-1+b3
> ii psmisc 23.2-1
> ii x11-utils 7.7+4
> ii zlib1g 1:1.2.11.dfsg-1
>
> Versions of packages thunderbird recommends:
> ii hunspell-en-us [hunspell-dictionary] 1:2018.04.16-1
> ii lightning 1:68.0~b1-1
>
> Versions of packages thunderbird suggests:
> ii apparmor 2.13.3-2
> pn fonts-lyx <none>
> ii libgssapi-krb5-2 1.17-5
>
> -- Configuration Files:
> /etc/apparmor.d/usr.bin.thunderbird changed [not included]
>
> -- no debconf information
--- End Message ---
