[pkg-apparmor] Bug#882044: apparmor should allow thunderbird to open text files with geany under xfce

[Ben Caradoc-Davies]

Package: apparmor
Version: 2.11.1-3
Severity: normal

Dear Maintainer,

opening a text attachment in thunderbird under xfce results in an error dialog:

Failed to execute default File Manager.
Failed to execute child process “/usr/bin/Thunar” (Permission denied).

journalctl:

Nov 18 14:10:30 ripley audit[27284]: AVC apparmor="DENIED" operation="exec"
profile="thunderbird" name="/home/ben/bin/geany" pid=27284 comm="thunderbird"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=1000
Nov 18 14:10:30 ripley audit[27284]: AVC apparmor="DENIED" operation="exec"
profile="thunderbird" name="/usr/bin/geany" pid=27284 comm="thunderbird"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
Nov 18 14:10:30 ripley kernel: audit: type=1400 audit(1510967430.978:38):
apparmor="DENIED" operation="exec" profile="thunderbird"
name="/home/ben/bin/geany" pid=27284 comm="thunderbird" requested_mask="x"
denied_mask="x" fsuid=1000 ouid=1000
Nov 18 14:10:30 ripley kernel: audit: type=1400 audit(1510967430.978:39):
apparmor="DENIED" operation="exec" profile="thunderbird" name="/usr/bin/geany"
pid=27284 comm="thunderbird" requested_mask="x" denied_mask="x" fsuid=1000
ouid=0
Nov 18 14:10:30 ripley audit[27289]: AVC apparmor="DENIED" operation="exec"
profile="thunderbird" name="/usr/bin/thunar" pid=27289 comm="exo-helper-1"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
Nov 18 14:10:30 ripley kernel: audit: type=1400 audit(1510967430.994:40):
apparmor="DENIED" operation="exec" profile="thunderbird" name="/usr/bin/thunar"
pid=27289 comm="exo-helper-1" requested_mask="x" denied_mask="x" fsuid=1000
ouid=0

Kind regards,
Ben.



-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages apparmor depends on:
ii  debconf [debconf-2.0]  1.5.65
ii  libc6                  2.24-17
ii  lsb-base               9.20170808
ii  python3                3.6.3-2

apparmor recommends no packages.

Versions of packages apparmor suggests:
pn  apparmor-profiles        <none>
pn  apparmor-profiles-extra  <none>
pn  apparmor-utils           <none>

-- debconf information:
  apparmor/homedirs: