Package: thunderbird
Version: 1:68.8.0-1~deb10u1
Severity: minor

When running Thunderbird under Xfce with
/etc/apparmor.d/usr.bin.thunderbird enabled, Thunderbird always opens
URLs with sensible-browser, even if that is not the "preferred browser"
selected in Xfce's "Preferred Applications" settings panel
(exo-preferred-applications).  After `aa-disable /usr/bin/thunderbird`,
Thunderbird henceforth opens URLs in the right browser.

I suspect this is because the AppArmor profile prohibits exo-open (when
spawned by Thunderbird) from reading ~/.config/xfce4/helpers.rc, which
apparently is where Xfce keeps the user's application selections.  When
apparmor is enabled, opening a URL gives me this on Thunderbird's
stderr:

> (exo-helper-1:2307): libxfce4util-CRITICAL **: 17:43:07.428: Failed to parse 
> file /home/gnoutchd/.config/xfce4/helpers.rc, ignoring.

And I get this in the journal:

> May 12 17:43:07 tbirdtest audit[2307]: AVC apparmor="DENIED" operation="open" 
> profile="thunderbird" name="/home/gnoutchd/.config/xfce4/helpers.rc" pid=2307 
> comm="exo-helper-1" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> May 12 17:43:07 tbirdtest kernel: audit: type=1400 audit(1589319787.417:43): 
> apparmor="DENIED" operation="open" profile="thunderbird" 
> name="/home/gnoutchd/.config/xfce4/helpers.rc" pid=2307 comm="exo-helper-1" 
> requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000


-- System Information:
Debian Release: 10.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-9-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8),
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii  debianutils               4.8.6.1
ii  fontconfig                2.13.1-2
ii  libatk1.0-0               2.30.0-2
ii  libc6                     2.28-10
ii  libcairo-gobject2         1.16.0-4
ii  libcairo2                 1.16.0-4
ii  libdbus-1-3               1.12.16-1
ii  libdbus-glib-1-2          0.110-4
ii  libevent-2.1-6            2.1.8-stable-4
ii  libffi6                   3.2.1-9
ii  libfontconfig1            2.13.1-2
ii  libfreetype6              2.9.1-3+deb10u1
ii  libgcc1                   1:8.3.0-6
ii  libgdk-pixbuf2.0-0        2.38.1+dfsg-1
ii  libglib2.0-0              2.58.3-2+deb10u2
ii  libgtk-3-0                3.24.5-1
ii  libgtk2.0-0               2.24.32-3
ii  libjsoncpp1               1.7.4-3
ii  libpango-1.0-0            1.42.4-8~deb10u1
ii  libstartup-notification0  0.12-6
ii  libstdc++6                8.3.0-6
ii  libvpx5                   1.7.0-3+deb10u1
ii  libx11-6                  2:1.6.7-1
ii  libx11-xcb1               2:1.6.7-1
ii  libxcb-shm0               1.13.1-2
ii  libxcb1                   1.13.1-2
ii  libxext6                  2:1.3.3-1+b2
ii  libxrender1               1:0.9.10-1
ii  libxt6                    1:1.1.5-1+b3
ii  psmisc                    23.2-1
ii  x11-utils                 7.7+4
ii  zlib1g                    1:1.2.11.dfsg-1

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary]  1:2018.04.16-1
pn  lightning                             <none>

Versions of packages thunderbird suggests:
ii  apparmor          2.13.2-10
ii  fonts-lyx         2.3.2-1
ii  libgssapi-krb5-2  1.17-3

-- no debconf information

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to