Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Apparmor, open link in Browser, Thunderbird, Debian9

Linux Kernel, Network, and Services configuration.
Post Reply
Message
Author
Ytre
Posts: 3
Joined: 2017-06-05 10:30

Apparmor, open link in Browser, Thunderbird, Debian9

#1 Post by Ytre »

i have a problem with opening links in Vivaldi (1.13.1008.34 (Stable channel) (64-bit)) via Thunderbird (52.4.0 (64-bit)).

$uname -a
Linux sun 4.13.0-1-amd64 #1 SMP Debian 4.13.13-1 (2017-11-16) x86_64 GNU/Linux.
Vivaldi is set systemwide as my preferred browser. Thunderbird has it as the preferred action to open http/https links with my standard browser. I've tried also with the path to the browser (/opt/vivaldi/vivaldi) in the config of Thunderbird, but it didn't work.

I've checked with

$tail -f /var/log/messages:
Dec 6 09:19:09 sun kernel: [17764.341411] audit: type=1400
audit(1512548349.389:549): apparmor="DENIED" operation="exec"
profile="thunderbird" name="/opt/vivaldi/vivaldi" pid=10791
comm="thunderbird" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
This comes up, when i click on links in Thunderbird to open it with Vivaldi.

When i change my standard browser i.e. to Chrome or Firefox, it works. It is possible to open links in mails with my standard browser. When i go back to Vivaldi as my standard browser the apparmor message comes up and it is not possible to open links in mails.

I'v tried also a complete reinstallation of Thunderbird and Vivaldi. Same problem.

I've found this: https://git.launchpad.net/~u-d/apparmor ... 217579e845

These patch is inside the profile /etc/apparmor.d/usr.bin.thunderbird. I 've didn't change anything in the profile.

When i stop apparmor with

$/etc/init.d/apparmor teardown

it is possible to open links via Thunderbird with Vivaldi.

So the reason must be a combination within Apparmor and the profile for Thunderbird

Any ideas?

regards Ytre

User avatar
pylkko
Posts: 1802
Joined: 2014-11-06 19:02

Re: Apparmor, open link in Browser, Thunderbird, Debian9

#2 Post by pylkko »

I saw a mailing list post some time ago that Debian will change to using apparmor by default on kernels 4.13 ->

it's very possible that no one has come across the situation you are in now previously, so you need to either go back to not using it, or config it so that you can do what you want. You could then post here so that other people might benefit

Have you looked at the wiki?

https://wiki.debian.org/AppArmor/HowToUse

Ytre
Posts: 3
Joined: 2017-06-05 10:30

Re: Apparmor, open link in Browser, Thunderbird, Debian9

#3 Post by Ytre »

pylkko wrote:I saw a mailing list post some time ago that Debian will change to using apparmor by default on kernels 4.13 ->

it's very possible that no one has come across the situation you are in now previously, so you need to either go back to not using it, or config it so that you can do what you want. You could then post here so that other people might benefit

Have you looked at the wiki?

https://wiki.debian.org/AppArmor/HowToUse
Good idea to try with another kernel.

$uname -a
Linux sun 4.12.0-2-amd64 #1 SMP Debian 4.12.13-1 (2017-09-19) x86_64 GNU/Linux

Now it works. It is possible to open links in Tunderbird mail in Vivaldi

So it is a problem within the kernel 4.13 and apparmor, profile thunderbird.

I will check now the AppArmor Wiki but it seems more then it is a bug, maybe?


Post Reply