> I'm sorry, would you mind elaborating? profiles.ini allows configuration of where each profile stores emails, so what are the consequences of my doing that? I used it, and the same PATH variable, prior to 24.04 without problem.
that will direct thunderbird to access your emails stored at the location
/media/lubuntu/drive/hq/email/thunderbird/certainprofilegoeshere
which explains why your dmesg contains denials like
[39889.472715] audit: type=1400 audit(1714429239.953:352): apparmor="DENIED" operation="open" class="file" profile="snap.thunderbird.thunderbird" name="/media/lubuntu/drive/hq/email/thunderbird/awesomenough/.parentlock" pid=72158 comm="thunderbird-bin" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
which was my comment about being at a loss as to why thunderbird is trying to access
The consequences of doing that are that the snap confinement for thunderbird doesn't give it access to that location. The thunderbird deb is installing the thunderbird snap, you can read more about it at the following link https://www.omgubuntu.co.uk/2024/02/thunderbird-snap-in-ubuntu-24-04
For the chrome snap I would have to see the dmesg output to be sure but it could be a similar issue.
So how to address this. Unfortunately doesn't currently have a mechanism to allow the user to override its confinement. You can manually update the generated apparmor profile but snap will regenerate it and throw your custom rules away the next time it refreshes the application.
> I'm sorry, would you mind elaborating? profiles.ini allows configuration of where each profile stores emails, so what are the consequences of my doing that? I used it, and the same PATH variable, prior to 24.04 without problem.
that will direct thunderbird to access your emails stored at the location lubuntu/ drive/hq/ email/thunderbi rd/certainprofi legoeshere
/media/
which explains why your dmesg contains denials like 9.953:352) : apparmor="DENIED" operation="open" class="file" profile= "snap.thunderbi rd.thunderbird" name="/ media/lubuntu/ drive/hq/ email/thunderbi rd/awesomenough /.parentlock" pid=72158 comm="thunderbi rd-bin" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
[39889.472715] audit: type=1400 audit(171442923
which was my comment about being at a loss as to why thunderbird is trying to access
``` lubuntu/ drive/hq/ email/thunderbi rd/awesomenough /.parentlock lubuntu/ drive/hq/ email/thunderbi rd/awesomenough /lock
/media/
/media/
```
The consequences of doing that are that the snap confinement for thunderbird doesn't give it access to that location. The thunderbird deb is installing the thunderbird snap, you can read more about it at the following link https:/ /www.omgubuntu. co.uk/2024/ 02/thunderbird- snap-in- ubuntu- 24-04
For the chrome snap I would have to see the dmesg output to be sure but it could be a similar issue.
So how to address this. Unfortunately doesn't currently have a mechanism to allow the user to override its confinement. You can manually update the generated apparmor profile but snap will regenerate it and throw your custom rules away the next time it refreshes the application.