> evince
(evince:58774): dbind-WARNING **: 10:34:53.828: Couldn't connect to
accessibility bus: Failed to connect to socket /run/user/1000/at-spi/bus_0:
Permission denied
> uname -a
Linux aorus 6.5.0-14-generic #14~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Mon Nov 20
18:15:30 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
> lsb_release -a
LSB Version: core-11.1.0ubuntu4-noarch:security-11.1.0ubuntu4-noarch
Distributor ID: Ubuntu
Description: Ubuntu 22.04 LTS
Release: 22.04
Codename: jammy
> dpkg -l | grep evince
ii evince 42.1-3 amd64 Document (PostScript, PDF) viewer
ii evince-common 42.1-3 all Document (PostScript, PDF) viewer -
common files
> grep at-spi /etc/apparmor.d/usr.bin.evince
owner /{,var/}run/user/*/at-spi2-*/ rw,
owner /{,var/}run/user/*/at-spi2-*/** rw,
> journalctl -f
Jan 13 10:41:32 aorus audit[58974]: AVC apparmor="DENIED" operation="open"
class="file" profile="/usr/bin/evince" name="/usr/local/lib/libgmp.so.10.5.0"
pid=58974 comm="evince" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jan 13 10:41:32 aorus kernel: audit: type=1400 audit(1705171292.693:70):
apparmor="DENIED" operation="open" class="file" profile="/usr/bin/evince"
name="/usr/local/lib/libgmp.so.10.5.0" pid=58974 comm="evince"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jan 13 10:41:32 aorus audit[58974]: AVC apparmor="DENIED" operation="connect"
class="file" profile="/usr/bin/evince" name="/run/user/1000/at-spi/bus_0"
pid=58974 comm="evince" requested_mask="wr" denied_mask="wr" fsuid=1000
ouid=1000
Jan 13 10:41:32 aorus kernel: audit: type=1400 audit(1705171292.709:71):
apparmor="DENIED" operation="connect" class="file" profile="/usr/bin/evince"
name="/run/user/1000/at-spi/bus_0" pid=58974 comm="evince" requested_mask="wr"
denied_mask="wr" fsuid=1000 ouid=1000
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1978838
Title:
Couldn't connect to accessibility bus
Status in evince package in Ubuntu:
Fix Released
Status in evince source package in Jammy:
Fix Released
Bug description:
* Impact
the apparmor profile blocks the connection to the accessibility bus
since it hasn't been updated for the new socket location,
https://gitlab.gnome.org/GNOME/at-spi2-core/-/issues/43
* Test Case
start evince, it shouldn't print the warning
dbind-WARNING **: Couldn't connect to accessibility bus: Failed to
connect to socket /run/user/UID/at-spi/bus_0: Permission denied
start orca, it should be able to read the content of evince
* Regression potential
The change is only allowing an extra location in the apparmor profile,
we kept also the old path for compatibility reasons and for making the
profile easier to share between series. Allowing the extra location
shouldn't create a regression but if the change was incorrect it is
possible that evince would still bot be able to connect to the bus
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1978838/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
