Upgraded thunderbird to latest version and got this message:
Skipping profile in /etc/apparmor.d/disable: usr.bin.thunderbird
1 Like
Confirmed.
File /etc/apparmor.d/usr.bin.thunderbird is owned by package thunderbird by packages.debian.org.
dpkg -S /etc/apparmor.d/usr.bin.thunderbird
thunderbird: /etc/apparmor.d/usr.bin.thunderbird
And that Debian package has some rather strange behavior:
Debian Bug report logs - #884191
Please do not disable AppArmor silently and prevent its re-activation
In other words, Debian does not enable that AppArmor profile by default and the way to enable the AppArmor profile by default is rather unexpected.
Package GitHub - Kicksecure/apparmor-profile-thunderbird: AppArmor profile for Thunderbird - https://www.kicksecure.com/wiki/AppArmor - for better security (hardening). is currently only shipping additions:
apparmor-profile-thunderbird/etc/apparmor.d/local/usr.bin.thunderbird at master · Kicksecure/apparmor-profile-thunderbird · GitHub
But should be extended to enable the Thunderbird AppArmor profile by default and work around the Debian mechanism to disable the AppArmor profile after update.
1 Like