[pkg-apparmor] Bug#882043: apparmor should allow thunderbird to open links with firefox via exo-helper on xfce

[Ben Caradoc-Davies]

Package: apparmor
Version: 2.11.1-3
Severity: normal

Dear Maintainer,

clicking on an email link in thunderbird results in an error dialog:

Failed to execute default Web Browser.
Failed to execute child process “/usr/bin/firefox” (Permission denied).

journalctl reports:

Nov 18 14:02:57 ripley kernel: audit: type=1400 audit(1510966977.757:32):
apparmor="DENIED" operation="exec" profile="thunderbird"
name="/usr/lib/firefox/firefox" pid=27192 comm="exo-helper-1"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Firefox is set as the preferred web browser under xfce "Preferred
Applications".

Kind regards,
Ben.



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages apparmor depends on:
ii  debconf [debconf-2.0]  1.5.65
ii  libc6                  2.24-17
ii  lsb-base               9.20170808
ii  python3                3.6.3-2

apparmor recommends no packages.

Versions of packages apparmor suggests:
pn  apparmor-profiles        <none>
pn  apparmor-profiles-extra  <none>
pn  apparmor-utils           <none>

-- debconf information:
  apparmor/homedirs: