On Thu, 11 Jan 2018 10:11:07 +0100 Urs Schroffenegger
<nab+report...@lampshade.ch> wrote:
Jan 11 09:06:18 flare kernel: [60207.044643] audit: type=1400
audit(1515657978.983:138): apparmor="DENIED" operation="file_mmap"
profile="thunderbird" name="/tmp/.glXWcTtR" pid=534 comm="thunderbird"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
Jan 11 09:06:18 flare kernel: [60207.044646] audit: type=1400
audit(1515657978.983:139): apparmor="DENIED" operation="file_mmap"
profile="thunderbird" name="/tmp/.glXWcTtR" pid=534 comm="thunderbird"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
Jan 11 09:06:18 flare kernel: [60207.044657] audit: type=1400
audit(1515657978.983:140): apparmor="DENIED" operation="mkdir"
profile="thunderbird" name="/home/nab.nv/" pid=534 comm="thunderbird"
requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
These `.gl*` and `/home/nab.nv/` are irrelevant here, it's
NVIDIA-related stuff that will be fixed after some discussion. [0]
> I use version 52.4.0-1
I'm pretty sure your issue would be fixed if you update to 52.6 (or
event to 54.5 for that matter):
https://salsa.debian.org/mozilla-team/thunderbird/blob/debian/1%2552.6.0-1_deb9u1/debian/apparmor/usr.bin.thunderbird#L33
It should really allow to launch Acrobat.
Thunderbird profile was updated to be very permissive in order not to
break various use cases. This really needs to be fixed in the right way,
but that's off-topic here.
[0] https://lists.ubuntu.com/archives/apparmor/2018-February/011457.html
