On Wed, 06 Feb 2019 at 16:20:32 +0100, Julien Cristau wrote:
> trying to open a pdf file from my local firefox installs fails, with a
> message like the below in the kernel log:
>
> [239440.060481] audit: type=1400 audit(1549462128.942:91): apparmor="DENIED"
> operation="file_mmap" profile="/usr/bin/evince"
> name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992
> comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
> [239440.062127] audit: type=1400 audit(1549462128.942:92): apparmor="DENIED"
> operation="file_mmap" profile="/usr/bin/evince"
> name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992
> comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
I assume your local Firefox build sets a LD_LIBRARY_PATH on itself and its
child processes?
If so, I'm not sure there's much that evince can do about that.
(If desktop file-handling was delegated to a D-Bus API, a bit like the way
flatpak-xdg-utils' xdg-open reimplementation works, then that would solve this
sort of thing forever... but that doesn't currently exist.)
smcv
