#932557 thunderbird: AppArmor denies access to /dev/shm/org.mozilla.ipc.* (for v68)

Package:
thunderbird
Source:
thunderbird
Description:
mail/news client with RSS, chat and integrated spam filter support
Submitter:
Vincas Dargis
Date:
2022-04-15 16:06:05 UTC
Severity:
important
Tags:
#932557#5
Date:
2019-07-20 15:56:27 UTC
From:
To:
Dear Maintainer,

Testing Thunderbird 68 from experimental produces spam of denials by AppArmor:
```
type=AVC msg=audit(1563637182.506:272): apparmor="DENIED" operation="mknod" profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.0" pid=2783 comm="thunderbird" request
ed_mask="c" denied_mask="c" fsuid=1000 ouid=1000

type=AVC msg=audit(1563637182.570:273): apparmor="DENIED" operation="mknod" profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.1" pid=2783 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

type=AVC msg=audit(1563637182.622:274): apparmor="DENIED" operation="mknod" profile="thunderbird" name="/dev/shm/org.mozilla.ipc.2783.2" pid=2783 comm="thunderbird" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
...
```
Result is black window, no UI is visible, application is completely unusable.

Adding this rule fixes the issue:
```
owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw,
```

I will work for upstream patch to fix this.

#932557#16
Date:
2022-04-15 15:53:56 UTC
From:
To:
This issue was fixed already long ago. So clean up the list of bug
reports

Regards
Carsten

Am Sat, Jul 20, 2019 at 06:56:27PM +0300 schrieb Vincas Dargis: