Bug#855346: been hit with same

[intrigeri]

Tim Rühsen:
> On Fri, 8 Dec 2017 14:08:13 +0100 Paolo Inaudi  wrote:
>> Profile from #126 still doesn't allow to open links in Firefox:
>> 
>> dic 08 14:06:43 paolo-desktop audit[19990]: AVC apparmor="DENIED" 
>> operation="exec" profile="thunderbird" name="/usr/lib/firefox/firefox" 
>> pid=19990 comm="thunderbird" requested_mask="x" denied_mask="x" 
>> fsuid=1000 ouid=0

> Same problem here on latest Debian unstable.

Thanks for your feedback.

I believe I've fixed this upstream in AppArmor itself:
https://gitlab.com/apparmor/apparmor/commit/ff66ca90390d14fa710ac28cc20728f934152724
… which will make it into Debian once we package AppArmor 2.12.

Cheers,
-- 
intrigeri

Bug#855346: been hit with same

[Tim Rühsen]

On Fri, 8 Dec 2017 14:08:13 +0100 Paolo Inaudi  wrote:
> Profile from #126 still doesn't allow to open links in Firefox:
> 
> dic 08 14:06:43 paolo-desktop audit[19990]: AVC apparmor="DENIED" 
> operation="exec" profile="thunderbird" name="/usr/lib/firefox/firefox" 
> pid=19990 comm="thunderbird" requested_mask="x" denied_mask="x" 
> fsuid=1000 ouid=0

Same problem here on latest Debian unstable.

Fix / Work-around:

Add
  /usr/lib/firefox/firefox ixr,
to
  /etc/apparmor.d/usr.bin.thunderbird
and execute
  service apparmor reload

Not sure why /usr/bin/firefox is a symlink to /usr/lib/firefox/firefox
and if it has something to do with our problem.

Regards, Tim



signature.asc
Description: OpenPGP digital signature

Bug#855346: been hit with same

[Massimo Maiurana]

Paolo Inaudi ha scritto il 08/12/2017 alle 14:08:
> Profile from #126 still doesn't allow to open links in Firefox:
> 

Here it does, I just opened a link ina a message as a new tab in
firefox. Don't know why though.

-- 
Massimo Maiurana
Ragusa (RG)

Bug#855346: been hit with same

[Paolo Inaudi]

Profile from #126 still doesn't allow to open links in Firefox:

dic 08 14:06:43 paolo-desktop audit[19990]: AVC apparmor="DENIED" 
operation="exec" profile="thunderbird" name="/usr/lib/firefox/firefox" 
pid=19990 comm="thunderbird" requested_mask="x" denied_mask="x" 
fsuid=1000 ouid=0


Paolo Inaudi

On Fri, 8 Dec 2017 13:22:56 +0100 Massimo Maiurana  
wrote:

> On Thu, 7 Dec 2017 21:59:28 +0100 Massimo Maiurana 
> wrote:
> > I can confirm that I'm experiencing this bug now, after a recent 
upgrade

> > two days ago.
>
> Solved for now replacing the current apparmor profile with the one in
> message #126, at least I can open attachments again until a proper fix
> is pull upstream.
>
> --
> Massimo Maiurana
> Ragusa (RG)
>
>

Bug#855346: been hit with same

[Massimo Maiurana]

On Thu, 7 Dec 2017 21:59:28 +0100 Massimo Maiurana 
wrote:
> I can confirm that I'm experiencing this bug now, after a recent upgrade
> two days ago.

Solved for now replacing the current apparmor profile with the one in
message #126, at least I can open attachments again until a proper fix
is pull upstream.

-- 
Massimo Maiurana
Ragusa (RG)

Bug#855346: been hit with same

[Massimo Maiurana]

I can confirm that I'm experiencing this bug now, after a recent upgrade
two days ago.
I can't open attachments anymore but I'm still able to save them.
Running thunderbird from a console I can see that it complain about
missing permissions, even for just opening recently-used.xbel

-- 
Massimo Maiurana
Ragusa (RG)

Bug#855346: been hit with same

[Cyrille Chépélov]

|found|855346 1:52.4.0-1
fixed 855346 1:52.4.0-2~exp1


Greetings,

been hit with the same issue (GNOME 3.26 environment), and while I can't 
comment on what apparmor-ing was expected to achieve, the experimental 
version does fix the "can't open attachments" issue for me.


Thanks!

    -- Cyrille