Bug#946131: Apparmor breaks Send -> Email depending on settings

[Rene Engelhard <rene@debian.org>]

severity 946131 minor
tag 946131 + wontfix
thanks

Hi,

On Tue, Dec 03, 2019 at 11:09:20PM -0500, Anthony DeRobertis wrote:
> Attempting to use any of the email options under File->Send results in
> (in the terminal I started LibreOffice from, just silently doing nothing
> as far as the GUI is concerned):
> 
> /usr/lib/libreoffice/program/senddoc: line 62: /usr/bin/file: Permission denied
> /usr/lib/libreoffice/program/senddoc: line 70: /usr/bin/thunderbird: Permission denied
> 
> This is because I have Thunderbird selected in Options→Internet→Email,
> which has a nice 'Browse...' button to select an arbitrary program. That
> isn't really compatible with the AppArmor profile. (When I set it to
> sensible-lomua instead of /usr/bin/thunderbird it worked, still using

Exactly. Use that.

> thunderbird, but through xdg-email instead, I presume.)

It's the default, yes.

case `basename "$MAILER"` in
    sensible-lomua)
        if [ -x /usr/bin/xdg-email ] ; then
            MAILER=/usr/bin/xdg-email
        elif [ -n "$KDE_FULL_SESSION" -a -x /usr/bin/kde-open ] \
           || [ -x /usr/bin/gnome-open ] \
           || [ -x /usr/bin/xdg-open ]; then
            # use an undefined mailer, to trigger the default handling
            MAILER=undefined
        elif [ -n "$GNOME_DESKTOP_SESSION_ID" -a -x /usr/bin/evolution ]; then
            MAILER=/usr/bin/evolution
        elif [ -n "$KDE_FULL_SESSION" -a -x /usr/bin/kmail ]; then
            MAILER=/usr/bin/kmail
        elif [ -x /usr/bin/evolution ]; then
            # default
            MAILER=/usr/bin/evolution
        elif [ -x /usr/bin/icedove ]; then
            # fallback
            MAILER=/usr/bin/icedove
        elif [ -x /usr/bin/thunderbird ]; then
            # fallback
            MAILER=/usr/bin/thunderbird
        fi
        ;;
esac

> I'm not sure how to fix this other than add a bunch of possible email
> programs to the AppArmor program and a warning to the settings box that
> if you pick a weird one, you'll need to edit the AppArmor profile. Not

And I am definitely not going to do that.

> ideal, and AFAIK you need root to edit the profile.

Exactly.

Regards,

Rene