Apparmor, open link in Browser, Thunderbird, Debian9

Kernels & Hardware, configuring network, installing services

Apparmor, open link in Browser, Thunderbird, Debian9

Postby Ytre » 2017-12-06 09:48

i have a problem with opening links in Vivaldi (1.13.1008.34 (Stable channel) (64-bit)) via Thunderbird (52.4.0 (64-bit)).

$uname -a
Linux sun 4.13.0-1-amd64 #1 SMP Debian 4.13.13-1 (2017-11-16) x86_64 GNU/Linux.
Vivaldi is set systemwide as my preferred browser. Thunderbird has it as the preferred action to open http/https links with my standard browser. I've tried also with the path to the browser (/opt/vivaldi/vivaldi) in the config of Thunderbird, but it didn't work.

I've checked with

$tail -f /var/log/messages:
Dec 6 09:19:09 sun kernel: [17764.341411] audit: type=1400
audit(1512548349.389:549): apparmor="DENIED" operation="exec"
profile="thunderbird" name="/opt/vivaldi/vivaldi" pid=10791
comm="thunderbird" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
This comes up, when i click on links in Thunderbird to open it with Vivaldi.

When i change my standard browser i.e. to Chrome or Firefox, it works. It is possible to open links in mails with my standard browser. When i go back to Vivaldi as my standard browser the apparmor message comes up and it is not possible to open links in mails.

I'v tried also a complete reinstallation of Thunderbird and Vivaldi. Same problem.

I've found this: https://git.launchpad.net/~u-d/apparmor ... 217579e845

These patch is inside the profile /etc/apparmor.d/usr.bin.thunderbird. I 've didn't change anything in the profile.

When i stop apparmor with

$/etc/init.d/apparmor teardown

it is possible to open links via Thunderbird with Vivaldi.

So the reason must be a combination within Apparmor and the profile for Thunderbird

Any ideas?

regards Ytre
Ytre
 
Posts: 3
Joined: 2017-06-05 10:30

Re: Apparmor, open link in Browser, Thunderbird, Debian9

Postby pylkko » 2017-12-06 09:57

I saw a mailing list post some time ago that Debian will change to using apparmor by default on kernels 4.13 ->

it's very possible that no one has come across the situation you are in now previously, so you need to either go back to not using it, or config it so that you can do what you want. You could then post here so that other people might benefit

Have you looked at the wiki?

https://wiki.debian.org/AppArmor/HowToUse
User avatar
pylkko
 
Posts: 1213
Joined: 2014-11-06 19:02

Re: Apparmor, open link in Browser, Thunderbird, Debian9

Postby Ytre » 2017-12-06 10:19

pylkko wrote:I saw a mailing list post some time ago that Debian will change to using apparmor by default on kernels 4.13 ->

it's very possible that no one has come across the situation you are in now previously, so you need to either go back to not using it, or config it so that you can do what you want. You could then post here so that other people might benefit

Have you looked at the wiki?

https://wiki.debian.org/AppArmor/HowToUse


Good idea to try with another kernel.

$uname -a
Linux sun 4.12.0-2-amd64 #1 SMP Debian 4.12.13-1 (2017-09-19) x86_64 GNU/Linux

Now it works. It is possible to open links in Tunderbird mail in Vivaldi

So it is a problem within the kernel 4.13 and apparmor, profile thunderbird.

I will check now the AppArmor Wiki but it seems more then it is a bug, maybe?
Ytre
 
Posts: 3
Joined: 2017-06-05 10:30



Return to System configuration

Who is online

Users browsing this forum: carlos11 and 10 guests

fashionable