On 2018-01-22 15:00, Carsten Schoenert wrote:
dmesg output:
Jan 22 11:56:14 webdev kernel: [13770.507112] audit: type=1400 audit(1516618574.570:3738): apparmor="DENIED" operation="open" 
profile="thunderbird" name="/etc/ld.so.conf" pid=20508 comm="thunderbird" requested_mask="r" 
denied_mask="r" fsuid=1000 ouid=0
Jan 22 11:56:14 webdev kernel: [13770.584596] audit: type=1400 audit(1516618574.646:3739): apparmor="DENIED" 
operation="file_mmap" profile="thunderbird" name="/tmp/.glXGIeSg" pid=20520 comm="thunderbird" 
requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
Jan 22 11:56:14 webdev kernel: [13770.584603] audit: type=1400 audit(1516618574.646:3740): apparmor="DENIED" 
operation="file_mmap" profile="thunderbird" name="/tmp/.glXGIeSg" pid=20520 comm="thunderbird" 
requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
Jan 22 11:56:15 webdev kernel: [13770.986348] audit: type=1400 audit(1516618575.046:3741): apparmor="DENIED" operation="open" 
profile="thunderbird" name="/etc/ld.so.conf" pid=20508 comm="thunderbird" requested_mask="r" 
denied_mask="r" fsuid=1000 ouid=0
Jan 22 11:56:18 webdev kernel: [13774.399479] audit: type=1400 audit(1516618578.462:3742): apparmor="DENIED" operation="mknod" 
profile="thunderbird" name="/dev/shm/org.chromium.eDpyPj" pid=20508 comm="thunderbird" requested_mask="c" 
denied_mask="c" fsuid=1000 ouid=1000
Jan 22 11:56:18 webdev kernel: [13774.407846] audit: type=1400 audit(1516618578.470:3743): apparmor="DENIED" operation="mknod" 
profile="thunderbird" name="/dev/shm/org.chromium.2HfjjV" pid=20508 comm="thunderbird" requested_mask="c" 
denied_mask="c" fsuid=1000 ouid=1000
Jan 22 11:56:18 webdev kernel: [13774.413259] audit: type=1400 audit(1516618578.474:3744): apparmor="DENIED" operation="mknod" 
profile="thunderbird" name="/dev/shm/org.chromium.0xsjOw" pid=20508 comm="thunderbird" requested_mask="c" 
denied_mask="c" fsuid=1000 ouid=1000

I've seen these strange mmaps on `/tmp/.gl*` on my local profiles. Very curious what's the reason to mmap() something from world-writable directory!

Gabriel has installed Thunderbird 58.0~b3-1 from experimental and got a
black screen before not disabling the Apparmor profile.

I could work on that.

Reply via email to