Whonix Wiki Download Docs News Support Tips Issues Contribute DONATE

Thunderbird skipping apparmor profile usr.bin.thunderbird

Upgraded thunderbird to latest version and got this message:

Skipping profile in /etc/apparmor.d/disable: usr.bin.thunderbird

1 Like

Confirmed.

File /etc/apparmor.d/usr.bin.thunderbird is owned by package thunderbird by packages.debian.org.

dpkg -S /etc/apparmor.d/usr.bin.thunderbird

thunderbird: /etc/apparmor.d/usr.bin.thunderbird

And that Debian package has some rather strange behavior:

Debian Bug report logs - #884191
Please do not disable AppArmor silently and prevent its re-activation

In other words, Debian does not enable that AppArmor profile by default and the way to enable the AppArmor profile by default is rather unexpected.

Package GitHub - Kicksecure/apparmor-profile-thunderbird: AppArmor profile for Thunderbird - https://www.kicksecure.com/wiki/AppArmor - for better security (hardening). is currently only shipping additions:
apparmor-profile-thunderbird/usr.bin.thunderbird at master · Kicksecure/apparmor-profile-thunderbird · GitHub

But should be extended to enable the Thunderbird AppArmor profile by default and work around the Debian mechanism to disable the AppArmor profile after update.

1 Like