Hello Hannes, decreased severity as AppAprmor is not enabled by default so bug reports like your's can't be a RC bug.
On Tue, Jun 05, 2018 at 08:11:49PM +0100, Hannes Hörl wrote: > thunderbird cannot be started anymore and breaks X. X does not update > the screen anymore, the cursor can still be moved and shows on the > screen while nothing can be clicked on or interacted with. Application > which e.g. play sound seem to still continue running, but cannot be > controlled fia the GUI anymore. The X-server needs to be completely > restarted to fix the issue. We will probably find a lot more of such issues which are need a mor granulary tuned AppArmor profile. @Vincas This is once more a thing which I'd like to adress to you with the a kindly request to have a look at. Thanks. Regards Carsten > With the last tested version (1:60.0~b6-1 from experimentsl) I see the > following in the syslog: > ---- > Jun 5 19:02:19 pfah kernel: [22845.000634] audit: type=1400 > audit(1528221739.361:49): apparmor="STATUS" operation="profile_replace" > profile="unconfined" name="thunderbird" pid=2979 comm="apparmor_parser" > Jun 5 19:02:19 pfah kernel: [22845.015315] audit: type=1400 > audit(1528221739.377:50): apparmor="STATUS" operation="profile_replace" > profile="unconfined" name="thunderbird//browser_java" pid=2979 > comm="apparmor_parser" > Jun 5 19:02:19 pfah kernel: [22845.016056] audit: type=1400 > audit(1528221739.377:51): apparmor="STATUS" operation="profile_replace" > profile="unconfined" name="thunderbird//browser_openjdk" pid=2979 > comm="apparmor_parser" > Jun 5 19:02:19 pfah kernel: [22845.016668] audit: type=1400 > audit(1528221739.377:52): apparmor="STATUS" operation="profile_replace" > profile="unconfined" name="thunderbird//gpg" pid=2979 comm="apparmor_parser" > Jun 5 19:02:19 pfah kernel: [22845.016920] audit: type=1400 > audit(1528221739.377:53): apparmor="STATUS" operation="profile_replace" > profile="unconfined" name="thunderbird//sanitized_helper" pid=2979 > comm="apparmor_parser" > Jun 5 19:04:27 pfah kernel: [22972.942931] audit: type=1400 > audit(1528221867.305:54): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=13506 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 19:04:27 pfah kernel: [22972.943282] audit: type=1400 > audit(1528221867.305:55): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=13506 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 19:04:27 pfah kernel: [22972.943288] audit: type=1400 > audit(1528221867.305:56): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=13506 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 19:04:27 pfah kernel: [22972.943292] audit: type=1400 > audit(1528221867.305:57): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=13506 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 19:04:27 pfah kernel: [22972.947864] audit: type=1400 > audit(1528221867.309:58): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=13506 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 19:04:27 pfah kernel: [22972.948154] audit: type=1400 > audit(1528221867.309:59): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=13506 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > ---- > > With the forner version I had (1:52.8.0-1 from sid) I see this in the > syslog: > ---- > Jun 5 18:33:38 pfah kernel: [21124.071163] audit: type=1400 > audit(1528220018.432:43): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=12543 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 18:33:38 pfah kernel: [21124.071195] audit: type=1400 > audit(1528220018.432:44): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=12543 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 18:33:38 pfah kernel: [21124.071268] audit: type=1400 > audit(1528220018.432:45): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=12543 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 18:33:38 pfah kernel: [21124.071312] audit: type=1400 > audit(1528220018.432:46): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=12543 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 18:33:38 pfah kernel: [21124.073642] audit: type=1400 > audit(1528220018.432:47): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=12543 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 18:33:38 pfah kernel: [21124.073676] audit: type=1400 > audit(1528220018.432:48): apparmor="DENIED" operation="open" > profile="thunderbird" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" > pid=12543 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 > Jun 5 18:33:43 pfah dbus-daemon[1162]: [session uid=1000 pid=1162] > Activating service name='org.freedesktop.secrets' requested by ':1.345' > (uid=1000 pid=12532 comm="/usr/lib/thunderbird/thunderbird ") > ---- > > Going through the logs I cannot find much more valuable information > neither from xorg nor from thunderbird. > > Let me know if I can provide something else to pin this down. > > Thanks & Bye, Hannes > > > -- System Information: > Debian Release: buster/sid > APT prefers unstable > APT policy: (500, 'unstable'), (1, 'experimental') > Architecture: amd64 (x86_64) > > Kernel: Linux 4.16.0-2-amd64 (SMP w/4 CPU cores) > Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), > LANGUAGE=en_US.utf8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > LSM: AppArmor: enabled > > Versions of packages thunderbird depends on: > ii debianutils 4.8.6 > ii fontconfig 2.13.0-5 > ii libatk1.0-0 2.28.1-1 > ii libc6 2.27-3 > ii libcairo-gobject2 1.15.10-3 > ii libcairo2 1.15.10-3 > ii libdbus-1-3 1.12.8-2 > ii libdbus-glib-1-2 0.110-2 > ii libevent-2.1-6 2.1.8-stable-4 > ii libffi6 3.2.1-8 > ii libfontconfig1 2.13.0-5 > ii libfreetype6 2.8.1-2 > ii libfribidi0 0.19.7-2 > ii libgcc1 1:8.1.0-5 > ii libgdk-pixbuf2.0-0 2.36.11-2 > ii libglib2.0-0 2.56.1-2 > ii libgtk-3-0 3.22.30-1 > ii libgtk2.0-0 2.24.32-1 > ii libhunspell-1.6-0 1.6.2-1+b1 > ii libjsoncpp1 1.7.4-3 > ii libnspr4 2:4.19-3 > ii libnss3 2:3.37.1-1 > ii libpango-1.0-0 1.42.1-1 > ii libpangocairo-1.0-0 1.42.1-1 > ii libpangoft2-1.0-0 1.42.1-1 > ii libsqlite3-0 3.23.1-1 > ii libstartup-notification0 0.12-5 > ii libstdc++6 8.1.0-5 > ii libvpx5 1.7.0-3 > ii libx11-6 2:1.6.5-1 > ii libx11-xcb1 2:1.6.5-1 > ii libxcb-shm0 1.13-1 > ii libxcb1 1.13-1 > ii libxext6 2:1.3.3-1+b2 > ii libxrender1 1:0.9.10-1 > ii libxt6 1:1.1.5-1 > ii psmisc 23.1-1+b1 > ii x11-utils 7.7+4 > ii zlib1g 1:1.2.11.dfsg-1 > > Versions of packages thunderbird recommends: > ii hunspell-en-us [hunspell-dictionary] 1:2018.04.16-1 > ii lightning 1:60.0~b6-1 > > Versions of packages thunderbird suggests: > ii apparmor 2.12-4 > ii fonts-lyx 2.3.0-2 > ii libgssapi-krb5-2 1.16-2 > > -- no debconf information
