Your message dated Sat, 14 Feb 2026 15:06:05 +0000
with message-id <[email protected]>
and subject line Re: Bug#1127935: evince: fails to start: AppArmor profile
doesn't allow running bwrap
has caused the Debian Bug report #1127935,
regarding evince: fails to start: AppArmor profile doesn't allow running bwrap
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1127935: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127935
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: evince
Version: 48.1-4+b1
Severity: normal
Dear Maintainer,
Evince currently fails to start on my testing system:
(org.gnome.Evince:10136): Gtk-WARNING **: 15:13:54.895: Could not load a pixbuf
from icon theme.
This may indicate that pixbuf loaders or the mime database could not be found.
**
Gtk:ERROR:../../../gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion
failed (error == NULL): Failed to load
/usr/share/icons/gnome/48x48/status/image-missing.png: Could not spawn `"bwrap"
"--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr"
"--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache"
"--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs"
"/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv"
"XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000"
"--symlink" "/usr/lib64" "/lib64" "--symlink" "/usr/lib" "/lib" "--seccomp"
"22" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "21"`:
Permission denied (os error 13) (gdk-pixbuf-error-quark, 0)
Bail out! Gtk:ERROR:../../../gtk/gtkiconhelper.c:495:ensure_surface_for_gicon:
assertion failed (error == NULL): Failed to load
/usr/share/icons/gnome/48x48/status/image-missing.png: Could not spawn `"bwrap"
"--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr"
"--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache"
"--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs"
"/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv"
"XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000"
"--symlink" "/usr/lib64" "/lib64" "--symlink" "/usr/lib" "/lib" "--seccomp"
"22" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "21"`:
Permission denied (os error 13) (gdk-pixbuf-error-quark, 0)
This is similar to #1127710 and relates to what's mentioned in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127710#19
Subsequent bug's messages may suggest a workaround
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127710#24), but
haven't tested this yet.
AFAIU, #1127158 may be the root cause, but is is beyond my
understanding.
Hope this helps,
Best regards,
-- System Information:
Debian Release: forky/sid
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'testing'), (500, 'stable'), (100, 'bullseye-fasttrack'), (100,
'bullseye-backports-staging')
Architecture: amd64 (x86_64)
Kernel: Linux 6.18.9+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages evince depends on:
ii dconf-gsettings-backend [gsettings-backend] 0.49.0-4
ii evince-common 48.1-4
ii gsettings-desktop-schemas 50~alpha-1
ii libatk1.0-0t64 2.59.1-2
ii libc6 2.42-11+b1
ii libcairo-gobject2 1.18.4-3
ii libcairo2 1.18.4-3
ii libevdocument3-4t64 48.1-4+b1
ii libevview3-3t64 48.1-4+b1
ii libgdk-pixbuf-2.0-0 2.44.5+dfsg-3
ii libglib2.0-0t64 2.87.2-3
ii libgnome-desktop-3-20t64 44.5-1
ii libgtk-3-0t64 3.24.51-4
ii libhandy-1-0 1.8.3-3+b1
ii libpango-1.0-0 1.57.0-1
ii libpangocairo-1.0-0 1.57.0-1
ii libsecret-1-0 0.21.7-2
ii shared-mime-info 2.4-5+b3
Versions of packages evince recommends:
ii dbus-user-session [default-dbus-session-bus] 1.16.2-3
ii dbus-x11 [dbus-session-bus] 1.16.2-3
Versions of packages evince suggests:
ii gvfs 1.58.0-2
ii nautilus-sendto 3.8.6-7+b1
ii poppler-data 0.4.12-1
-- no debconf information
Thank you for using reportbug
--
Olivier BERGER
https://www-public.imtbs-tsp.eu/~berger_o/ - OpenPGP 2048R/0xF9EAE3A65819D7E8
Ingenieur Recherche - Dept INF
Institut Mines-Telecom, Telecom SudParis, Evry (France)
--- End Message ---
--- Begin Message ---
Version: 49~alpha-2
On Sat, 14 Feb 2026 at 15:20:12 +0100, Olivier Berger wrote:
(org.gnome.Evince:10136): Gtk-WARNING **: 15:13:54.895: Could not load a pixbuf
from icon theme.
This may indicate that pixbuf loaders or the mime database could not be found.
...
This is similar to #1127710 and relates to what's mentioned in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127710#19
Yes, most apps that have a strict AppArmor profile and use gdk-pixbuf
are going to need changes to their AppArmor profiles now that gdk-pixbuf
uses glycin. I retitled the bug and raised the severity to grave.
The newer version of evince (which uses GTK 4) does start successfully:
the AppArmor profile doesn't seem to have changed significantly, so
presumably there's been some other code change that makes it not rely so
heavily on gdk-pixbuf.
smcv
--- End Message ---
