*** This bug is a duplicate of bug 1096837 ***
https://bugs.launchpad.net/bugs/1096837
This bug was fixed in the package evince - 3.10.3-0ubuntu15
---------------
evince (3.10.3-0ubuntu15) utopic; urgency=medium
* debian/apparmor-profile:
- allow site-wide dconf. Thanks to Lars Masden. (LP: #1355804)
- allow read/write to files we own in /media (LP: #1096837)
- allow read/write to files we own in /run/user/1000/at-spi2-*
(LP: #1308488)
- allow 'l' to /run/user/*/gvfs-metadata/** (LP: #1344810)
- allow read/write of @{HOME}/.cache/dconf/user (LP: #1024605)
* debian/apparmor-profile.abstraction:
- allow read of /etc/xdg/lubuntu/applications/defaults.list (LP: #1290157,
LP: #1299239)
- allow read of /**.[eE][pP][sS][fFiI23] (LP: #1330430)
-- Jamie Strandboge <[email protected]> Tue, 12 Aug 2014 14:30:43 -0500
** Changed in: evince (Ubuntu)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1330430
Title:
apparmor profile needs review/improvement
Status in “evince” package in Ubuntu:
Fix Released
Bug description:
Apparmor rules for evince forbid opening a PDF from an external drive mounted
under /media/… unless its filename ends in '.pdf'.
Same file will be opened if it is copied to /home/… or renamed to a filename
tailing in '.pdf' on the external drive.
See bugs #1096837 and #1327161.
On a GNU/Linux system like Ubuntu these rules are useless because
filetype is not determined by an extension. Checking the filename adds
no security. It smells like snakeoil to me.
Please review the apparmor profile. On an GNU/Linux system opening a
PDF should not denied on filename.
This bug affects Ubuntu versions 14.04 LTS, 12.04 LTS and 10.04 LTS.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1330430/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
