Dear Maintainer,

I'm clicking on a link into a mail in the experimental version of
thunderbird...

Nothing happened but in the console I get :
** (thunderbird:4592): WARNING **: Could not launch default application for
URI: Failed to execute child process ?/usr/lib/firefox/firefox? (Permission
denied)

All parameters in network.protocol-handler.* are defined to default value...

I tried to change this values but nothing change...

I tried also to change default browser, to use sensible-browser, direct path to
browser in place of "x-www-browser" but no changes...

Regards

C. Mourad Jaber

Control: found -1 thunderbird/1:52.4.0-1
However, I found a workaround: either install thunderbird/1:52.5.0-1
from unstable, or disable the apparmor profile yourself:

  sudo ln -s /etc/apparmor.d/usr.bin.thunderbird /etc/apparmor.d/disable/
  sudo apparmor_parser -R /etc/apparmor.d/usr.bin.thunderbird

Related bug is #882672.

Mourad, could you please report if either of those workarounds work for you?

Best regards,
Juhani Numminen

Dear Maintainer,

The lastest version in unstable (1:52.5.0-1) seems to have solved this issue...

Thanks for your work

Regards

Mourad

Although updated AppArmor profile fixes this (and similar) issue, please note that current Thunderbird profile state is
pretty poor security-wise. Decision was made to make it much more permissive in order not to break usability as
Thunderbird profile was enabled by default. Some work in seeded to make it more useful (secure _and_ usable).

Nevertheless, _please_ keep this profile enabled, report more bugs, and be patient and wait for more secure profile
version. Thanks! :-)

-- 
Hello

i want to invest in your region i have some funds under my management
please let me know if we can work together on this investment plan.

Regards
Melisa Mehmet

Hi the bug was resolved but is now back with Thunderbird 52.6.0

Thanks!

Jean

Hello,

we didn't have closed this report so "officially" this report wasn't ever
marked as resolved.

Don't get me wrong, 'just' saying it's now no working correctly any
longer isn't helping much. Please append some logging where the people
who are working on the apparmor profile can see whats going on under the
hood.

https://wiki.debian.org/AppArmor/Reportbug

Regards
Carsten

[argh, now with the correct bugnumber in CC]

Hello Maryse & Jean,

Am 10.02.2018 um 12:16 schrieb Maryse Argouin & Jean Lafontaine:

such errors are a bit "normal" and not related to the apparmor profile
issues. Please note Thunderbird don't know anything from a running
apparmor fencing and thus can't do any relation to it.
Yes, messages from the error console of Thunderbird aren't sufficient
here, the relevant information for debugging the apparmor behavior can
be found by the dmesg or journalctl command like described in the linked
URL I've written in my previous email.

PS: Please use always 'Reply-All' without the CC recipients will be cut
of in your answer. By this your feedback isn't reaching the BTS.

I dont know if it's helping but here is what is happening when i click
on a link in Thunderbird 52.6.0  using SolydX EE OS

Output of: sudo journalctl -kaf --no-hostname | grep -w 'apparmor="DENIED"'

fév 11 17:31:49 kernel: audit: type=1400 audit(1518388309.673:180):
apparmor="DENIED" operation="exec" profile="thunderbird"
name="/opt/firefox/firefox" pid=26794 comm="thunderbird"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0


Jean

Hi,

Maryse Argouin & Jean Lafontaine:

For the record, SolydX seems to be a Debian derivative. I'm not sure
if/why they ask their users to report bugs directly to Debian without
first checking that Debian is affected, but well… let's try to find
out whether this is relevant to Debian users and/or upstream:

Where does /opt/firefox/firefox come from? In other words, how did you
install this copy of Firefox?

Cheers,

I am Major Dennis Hornbeck. I am in the Engineering military unit here in Afghanistan, I Have a Proposal for you Please do get back for details.

Note: You have to reply to my private email.  m.hornbeck@aol.com

Hi,

intrigeri:

Ping?

Cheers,

בוקר טוב/ Good Morning

 מה שלומך היום? בבקשה אתה מדבר אנגלית? שלחתי לך הודעה אין תגובה.

ברכות מכובדות

סוזן                      

                          NB, Please do you speak English? I sent you message no response.

 * Edit[1]
 * Report this post[2]
 * Quote[3]
#1[4] Post[5] by *caffinate[6]* » Thu Nov 22, 2018 12:00 pm


MK Linux 17.1 Thunderbird Version 52.9.1 64 Bit

One persistent problem I'm having is the inability of Thunderbird to
open http, https URLs in emails with the Vivaldi. I also had the same
problem with Chromium.
When I run Thunderbird in Safe Mode in a console and try to open a url
in Thunderbird email I get this message:
*** (thunderbird:961): WARNING **: Could not launch default application
for URI: Failed to execute child process "/usr/bin/vivaldi-stable"
(Permission denied)*
EDIT: When I try to open links from Evolution Email Client - works fine.*EDIT2: Problem Appears to Be Solved:*

Narrowed this down to some kind of permissions problem with
thunderbird:\Found this: https://bugs.debian.org/cgi-bin/bugrepo ... bug=883245[7]

.....
I'm experiencing the same with the version that's currently in testing.However, I found a workaround: either install thunderbird/1:52.5.0-1
from unstable, or disable the apparmor profile yourself:

*sudo ln -s /etc/apparmor.d/usr.bin.thunderbird /etc/apparmor.d/disable/
sudo apparmor_parser -R /etc/apparmor.d/usr.bin.thunderbird*
*Now Thunderbird URL links open correctly in Vivaldi*

Related bug is #882672.


Links:

  1. https://forum.mxlinux.org/posting.php?mode=edit&f=104&p=467920
  2. https://forum.mxlinux.org/app.php/post/467920/report
  3. https://forum.mxlinux.org/posting.php?mode=quote&f=104&p=467920
  4. https://forum.mxlinux.org/viewtopic.php?p=467920#p467920
  5. https://forum.mxlinux.org/viewtopic.php?p=467920#p467920
  6. https://forum.mxlinux.org/memberlist.php?mode=viewprofile&u=19985
  7. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883245

Hello David,

your reported issue is obviously related to AppArmor. Even if the bug
report is also related to AppArmor it would have been better if you had
created a new issue as your problem is different ftom the reported issue
in 883245.
I've cloned the this old issue into anew one so the AppArmor people
don't have to hassle to figure out which problems are all reported to
this report.

Am 22.11.18 um 19:02 schrieb David Campbell:

Well, it's mostly clear that thunderbird isn't allowed to run this
binary as this is already visible on the CLI as you have posted above.

Yes and no.
It's a problem related to the AppArmor profile from Thunderbird and
disabling the AppArmor profile make for sure going away the problem, but
ist's not solved. It's probably just one line you need to add to the
AppAprmor profile. That's a thing intrigeri or Vincas can answer for
sure. (CCed)

@intrigeri
You will need to add the correct BTS tagging for apparmore please.

We believe that the bug you reported is fixed in the latest version of
thunderbird, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 914403@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Carsten Schoenert <c.schoenert@t-online.de> (supplier of updated thunderbird package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 22 Jun 2026 21:41:06 +0200
Source: thunderbird
Architecture: source
Version: 1:152.0-1
Distribution: experimental
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Closes: 880424 882218 883245 900210 909281 914403 917613 928178 949450 949649 955380 961269 1127710 1128672 1128876 1138513
Changes:
 thunderbird (1:152.0-1) experimental; urgency=medium
 .
   [ Carsten Schoenert ]
   * [5097e09] d/control: Bump B-D for libnss3-dev
   * [5350030] New upstream version 152.0
     (Closes: #1138513)
   * [92962df] Rebuild patch queue from patch-queue branch
     Removed patch (included upstream):
     fixes/Fix-conflicting-types-for-once_flag-and-call_once-with-gl.patch
     fixes/Fix-math_private.h-for-i386-FTBFS.patch
     fixes/Fix-sandbox-to-build-with-glibc-2.43.patch
   * [46de392] d/mozconfig.default: Remove option --enable-av1
 .
   [ Christoph Goehre ]
   * [5308430] rebuild patch queue from patch-queue branch (Closes: #1128876)
 .
   [ intrigeri ]
   * [77d16c3] Don't install AppArmor policy anymore
     (Closes: #1128672, #1127710, #928178, #909281, #955380, #882218, #900210,
      #914403, #917613, #949450, #880424, #883245, #961269, #949649)
Checksums-Sha1:
 1e9bca601d3dab684f2c1e34bbd107712eb17f8e 8402 thunderbird_152.0-1.dsc
 5ed145d0f72ee7e539f3f0d40cea83ed62b1499f 12403192 thunderbird_152.0.orig-thunderbird-l10n.tar.xz
 dbef2f6a94cec7b667931b222bdd6f0aaf9a4810 931861244 thunderbird_152.0.orig.tar.xz
 6fc9531bd0e3c27e7908228227a542966eb827f8 537512 thunderbird_152.0-1.debian.tar.xz
 41476b21bed4090bcf2c148b0178ef52d0e2f2e7 40158 thunderbird_152.0-1_amd64.buildinfo
Checksums-Sha256:
 8d348b506605fc73d56722d5a55ed9dae8af623989312e5c039786edfbe4f0f2 8402 thunderbird_152.0-1.dsc
 f4afa9846377239357e485da027035fe53762cc8100ced5cf5abca87fca7a1f8 12403192 thunderbird_152.0.orig-thunderbird-l10n.tar.xz
 64f02562f1f4a18e39c67b07255feb5828acde86327f55b1ebe45e3ac63963ea 931861244 thunderbird_152.0.orig.tar.xz
 52abff98afbeb3859791f46e5602bbbf6982f38876f7e223d0ff1ac7bb77c778 537512 thunderbird_152.0-1.debian.tar.xz
 38ab10bf14449c38f7233f8d883b1a6ffbe412606232763f9bcaa5dcda320c03 40158 thunderbird_152.0-1_amd64.buildinfo
Files:
 cddc168c5e8bdb4c051a11b4e56831b8 8402 mail optional thunderbird_152.0-1.dsc
 27c69983d0063061996fc52794377743 12403192 mail optional thunderbird_152.0.orig-thunderbird-l10n.tar.xz
 f49e9b967f1a1fdceec316060aef4959 931861244 mail optional thunderbird_152.0.orig.tar.xz
 d435a5b441fa39456dfa21b01881fdf3 537512 mail optional thunderbird_152.0-1.debian.tar.xz
 20c10b422095bf9f1d461c01e152c30e 40158 mail optional thunderbird_152.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=jjF1
-----END PGP SIGNATURE-----