Closed Bug 1422621 Opened 7 years ago Closed 5 years ago

AppArmor causes path "permission denied" on each subfolder and "Thunderbird cannot use the profile “default” because it is in use."

Categories

(Thunderbird :: Untriaged, defect)

52 Branch
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: elio.voci, Unassigned)

References

Details

(Keywords: dataloss)

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36 OPR/49.0.2725.39 Steps to reproduce: On Thu 30.11.2017 Thunderbird hung, blocking the system completely. I had to power off. On reboot, I started to get the message "Thunderbird cannot use the profile “default” because it is in use. To continue, close the running instance of Thunderbird or choose a different profile". I've deleted the .parentlock file, but this time that didn't help. My system is Linux 4.13.0-1-amd64 #1 SMP Debian 4.13.13-1 (2017-11-16) x86_64 GNU/Linux Actual results: I've launched Thunderbird with strace, and noticed several messages "open("/run/media/private/elio/mail/icedove/.parentlock", O_WRONLY|O_CREAT|O_TRUNC, 0666) = -1 EACCES (Permission denied)" My profile is hosted on a mounted profile, and permissions of each subfolder are as follows: drwxr-xr-x 27 elio elio 4096 Dec 3 20:57 /run/media/private/elio/mail/icedove/ drwxrwxrwx 5 root root 4096 Dec 3 20:59 /run/media/private/elio/mail drwx------ 5 elio elio 100 Nov 30 22:44 /run/media/private/elio drwxr-xr-x 3 root root 60 Nov 30 22:44 /run/media/private drwxr-xr-x 3 root root 60 Nov 30 22:44 /run/media drwxr-xr-x 41 root root 1240 Dec 3 21:04 /run Please note that this setting was running smoothly since ages; I cannot exclude that a Thunderbird update happened on that day, resulting in the hung and subsequent unclean stop. Expected results: Start Thunderbird normally, using the usual profile hosted on the mounted volume.
Severity: normal → critical
Keywords: dataloss
This is no upstream issue I guess, Debian has started with recent kernel image package in unstable and testing to add AppArmor support to the kernel. Thus brings a recommended package apparmor in the linux-image package and as Thunderbird in Debian has a AppArmor profile this will be used as long as the user doesn't denies the installation of the apparmor package or the usage of the Thunderbird profile. So I suggest to check if the package apparmor is installed by using 'apt show' or 'dpkg'. If yes check the status of apparmor by 'sudo aa-enabeld' or 'cat /sys/module/apparmor/parameters/enabled'. Check the status of the apparmor profiles with 'sudo aa-status'. I assume you will see a active profile for Thunderbird. Next you can check for DENIED messages due restrictions in the profile by study the syslog file 'sudo tail -f /var/log/syslog | grep DENIED'. In the end this is Debian BTS https://bugs.debian.org/882218 More information about AppArmor and usage/debug on this you can find on the wiki site for AppArmor https://wiki.debian.org/AppArmor Regards Carsten
Thanks Carsten, Indeed disabling AppArmor for Thunderbird solved the issue. Regards Elio
See Also: → 1437293
Summary: path permission on each subfolder → AppArmor causes path "permission denied" on each subfolder and "Thunderbird cannot use the profile “default” because it is in use."

This look like an apparmour bug to me, or are we suggesting restricting the places a profile can be stored if it is installed?

Indeed, closing ticket as invalid.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.