Bug#883245: More info

2020-09-15 Thread Carsten Schoenert

Hello Jesus,

Am 15.09.20 um 19:50 schrieb Jesus Eguiluz:

Hi, I have more info.

The same problem, I can't open links from thunderbird.

I used to be workaround it by put the
/etc/apparmor.d/usr.bin.thunderbird in complain mode. But this not work
anymore.

Now I have to disable de /etc/apparmor.d/usr.bin.thunderbird profile
with sudo aa-disable /etc/apparmor.d/usr.bin.thunderbird


sep 15 14:36:55 gsus-v110-14ast audit[9930]: AVC apparmor="DENIED"
operation="file_mmap" profile="thunderbird//sanitized_helper"
name="/opt/waterfox/waterfox" pid=9930 comm="waterfox"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
sep 15 14:36:55 gsus-v110-14ast kernel: audit: type=1400
audit(1600191415.454:368): apparmor="DENIED" operation="file_mmap"
profile="thunderbird//sanitized_helper" name="/opt/waterfox/waterfox"
pid=9930 comm="waterfox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=0


you try to run /opt/waterfox/waterfox which isn't allowed by the shipped 
apparmor profile.


Please open a issue on

  https://gitlab.com/apparmor/apparmor-profiles/-/issues

and ask the apparmor profile maintainer how to get your issue solved.

Please note also the file /usr/share/doc/thunderbird/README.apparmor 
which has some small additional information about Thunderbird and Apparmor.


---
Regards
Carsten Schoenert



Bug#883245: More info

2020-09-15 Thread Jesus Eguiluz
Hi, I have more info.

The same problem, I can't open links from thunderbird.

I used to be workaround it by put the
/etc/apparmor.d/usr.bin.thunderbird in complain mode. But this not work
anymore.

Now I have to disable de /etc/apparmor.d/usr.bin.thunderbird profile
with sudo aa-disable /etc/apparmor.d/usr.bin.thunderbird


sep 15 14:36:55 gsus-v110-14ast audit[9930]: AVC apparmor="DENIED"
operation="file_mmap" profile="thunderbird//sanitized_helper"
name="/opt/waterfox/waterfox" pid=9930 comm="waterfox"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
sep 15 14:36:55 gsus-v110-14ast kernel: audit: type=1400
audit(1600191415.454:368): apparmor="DENIED" operation="file_mmap"
profile="thunderbird//sanitized_helper" name="/opt/waterfox/waterfox"
pid=9930 comm="waterfox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=0
sep 15 14:36:55 gsus-v110-14ast audit[9932]: AVC apparmor="DENIED"
operation="file_mmap" profile="thunderbird//sanitized_helper"
name="/opt/waterfox/waterfox" pid=9932 comm="waterfox"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
sep 15 14:36:55 gsus-v110-14ast kernel: audit: type=1400
audit(1600191415.556:369): apparmor="DENIED" operation="file_mmap"
profile="thunderbird//sanitized_helper" name="/opt/waterfox/waterfox"
pid=9932 comm="waterfox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=0
sep 15 14:36:55 gsus-v110-14ast audit[9934]: AVC apparmor="DENIED"
operation="file_mmap" profile="thunderbird//sanitized_helper"
name="/opt/waterfox/waterfox" pid=9934 comm="waterfox"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
sep 15 14:36:55 gsus-v110-14ast kernel: audit: type=1400
audit(1600191415.684:370): apparmor="DENIED" operation="file_mmap"
profile="thunderbird//sanitized_helper" name="/opt/waterfox/waterfox"
pid=9934 comm="waterfox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=0
sep 15 14:36:55 gsus-v110-14ast audit[9937]: AVC apparmor="DENIED"
operation="file_mmap" profile="thunderbird//sanitized_helper"
name="/opt/waterfox/waterfox" pid=9937 comm="waterfox"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
sep 15 14:36:55 gsus-v110-14ast kernel: audit: type=1400
audit(1600191415.846:371): apparmor="DENIED" operation="file_mmap"
profile="thunderbird//sanitized_helper" name="/opt/waterfox/waterfox"
pid=9937 comm="waterfox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=0
sep 15 14:36:56 gsus-v110-14ast audit[9939]: AVC apparmor="DENIED"
operation="file_mmap" profile="thunderbird//sanitized_helper"
name="/opt/waterfox/waterfox" pid=9939 comm="waterfox"
requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
sep 15 14:36:56 gsus-v110-14ast kernel: audit: type=1400
audit(1600191416.234:372): apparmor="DENIED" operation="file_mmap"
profile="thunderbird//sanitized_helper" name="/opt/waterfox/waterfox"
pid=9939 comm="waterfox" requested_mask="m" denied_mask="m" fsuid=1000
ouid=0

Sl2


Jesus Eguiluz
Ingeniero Electrónico.
Investigación y Desarrollo
Andes Electrónica Ltda.
+56 2 2347-8780
www.andeselec.com