1

I have a fresh copy of Kubuntu 24.04

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04.2 LTS
Release:        24.04
Codename:       noble

Within this release Thunderbird is installed as snap.

$ snap version
snap    2.67
snapd   2.67
series  16
ubuntu  24.04
kernel  6.8.0-53-generic

$ sudo aa-status |grep thunderbird
[sudo] password for karsten: 
   snap-update-ns.thunderbird
   snap.thunderbird.hook.configure
   snap.thunderbird.hook.install
   snap.thunderbird.hook.post-refresh
   snap.thunderbird.thunderbird
   thunderbird//snap.thunderbird.thunderbird
   thunderbird
   /snap/thunderbird/663/usr/lib/thunderbird/thunderbird-bin (147997) snap.thunderbird.thunderbird
   /snap/thunderbird/663/usr/lib/thunderbird/thunderbird-bin (148180) snap.thunderbird.thunderbird

I have installed a NAS service via samba (autofs).

$ more /etc/auto.master.d/auto.karsten
ablage -fstype=cifs,vers=2.1,rw,credentials=/home/karsten/.smbcredentials,file_mode=0777,dir_mode=0777 ://192.168.1.20/ablage

When I try to add an attachement to an email from the local drive, it works. When I try to add an attachement to an email from network drive, I get a message Error opening directory '/home/karsten/HomeServer/ablage/Haus': Permission denied

I can find some entries in the log:

2025-02-21T21:16:42.584883+01:00 LinuxKirschbaum kernel: audit: type=1400 audit(1740169002.582:2166): apparmor="DENIED" operation="open" class="file" profile="snap.thunderbird.thunderbird" name="/etc/fstab" pid=147997 comm="thunderbird-bin" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
2025-02-21T21:16:42.587855+01:00 LinuxKirschbaum kernel: audit: type=1400 audit(1740169002.585:2167): apparmor="DENIED" operation="open" class="file" profile="snap.thunderbird.thunderbird" name="/run/mount/utab" pid=147997 comm="thunderbird-bin" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
2025-02-21T21:16:42.644055+01:00 LinuxKirschbaum dbus-daemon[1353]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1371' (uid=1001 pid=147997 comm="/snap/thunderbird/663/usr/lib/thunderbird/thunderb" label="snap.thunderbird.thunderbird (enforce)")
2025-02-21T21:16:42.646832+01:00 LinuxKirschbaum kernel: audit: type=1400 audit(1740169002.644:2168): apparmor="DENIED" operation="open" class="file" profile="snap.thunderbird.thunderbird" name="/run/mount/utab" pid=147997 comm="thunderbird-bin" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
2025-02-21T21:16:42.649830+01:00 LinuxKirschbaum kernel: audit: type=1400 audit(1740169002.647:2169): apparmor="DENIED" operation="open" class="file" profile="snap.thunderbird.thunderbird" name="/home/karsten/HomeServer/ablage/Haus/" pid=147997 comm="pool-thunderbir" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0

The changes in the Apparmor profile have no effect, e.g.(/var/lib/snapd/apparmor/profiles/snap.thunderbird.thunderbird):

    profile "snap.thunderbird.thunderbird" flags=(attach_disconnected,mediate_deleted) {
      #include <abstractions/base>
      #include <abstractions/consoles>
      #include <abstractions/openssl>
    owner /home/karsten/HomeServer/ablage/  rw,
      /etc/fstab r,
      # While in later versions of the base abstraction, include this explicitly
      # for series 16 and cross-distro
      /etc/ld.so.preload r,
...

Which configuration is needed to allow Thunderbird to access the network resource /home/karsten/HomeServer/ablage/Haus/?

Which rule should be added here?

Any suggestion is appreciated. I am completely at a loss.

kasch
  • 43

0 Answers0