System is Linux  3.2.0-25-generic #40-Ubuntu SMP Wed May 23 20:33:05 UTC 2012 
i686 i686 i386 GNU/Linux
Xubuntu 12.04
Stepped through all the DENIED errors and came up with this...

# Site-specific additions and overrides for usr.bin.evince.
# For more details, please see /etc/apparmor.d/local/README.
/usr/bin/exo-open ixr,
/usr/lib/i386-linux-gnu/xfce4/exo-1/exo-helper-1 ixr,
/etc/xdg/xdg-xubuntu/xfce4/helpers.rc r,
/etc/xdg/xfce4/helpers.rc r,

I believe this is restrictive enough but would like someone to confirm.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/987578

Title:
  Evince is not allowed to use exo-open

Status in “apparmor” package in Ubuntu:
  Triaged
Status in “evince” package in Ubuntu:
  Triaged

Bug description:
  Using a fresh install of Xubuntu 12.04 beta, I can not open links from
  within evince.

  A red bar appears on top and says :
  "Unable to open external link"
  "Failed to execute child process "exo-open" (Permission denied)"

  I suppose this is due to a bad configuration of AppArmor.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: evince 3.4.0-0ubuntu1
  ProcVersionSignature: Ubuntu 3.2.0-23.36-generic 3.2.14
  Uname: Linux 3.2.0-23-generic x86_64
  ApportVersion: 2.0.1-0ubuntu5
  Architecture: amd64
  Date: Tue Apr 24 02:40:31 2012
  EcryptfsInUse: Yes
  InstallationMedia: Xubuntu 12.04 LTS "Precise Pangolin" - Beta amd64 
(20120328)
  KernLog:
   Apr 24 02:22:50 box kernel: [349882.938280] type=1400 
audit(1335226970.303:28): apparmor="DENIED" operation="exec" parent=13156 
profile="/usr/bin/evince" name="/usr/bin/exo-open" pid=13157 comm="evince" 
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
   Apr 24 02:23:01 box kernel: [349894.110102] type=1400 
audit(1335226981.475:29): apparmor="DENIED" operation="exec" parent=13158 
profile="/usr/bin/evince" name="/usr/bin/exo-open" pid=13159 comm="evince" 
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
   Apr 24 02:29:40 box kernel: [350293.526127] type=1400 
audit(1335227380.890:30): apparmor="DENIED" operation="exec" parent=13225 
profile="/usr/bin/evince" name="/usr/bin/exo-open" pid=13226 comm="evince" 
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
  ProcEnviron:
   TERM=xterm
   PATH=(custom, user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: evince
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/987578/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to