[Bug 1252771] [NEW] Permission denied reading pdf.xz files

2013-11-19 Thread Martin Thornton
Public bug reported:

Ubuntu 13.10
evince-3.10.0

Apparmour does not give permission to read xz compressed pdf files,
however evince is otherwise capable of doing so.

Error in /var/syslog/:
kernel: [36640.816592] type=1400 audit(1384870022.949:59): apparmor=DENIED 
operation=exec parent=9632 profile=/usr/bin/evince name=/usr/bin/xz 
pid=9633 comm=EvJobScheduler requested_mask=x denied_mask=x fsuid=1000 
ouid=0

Added the following to /etc/apparmor.d/abstractions/evince:

in section # supported archivers
/usr/bin/xz ixr,

in section # from http://live.gnome.org/Evince/SupportedDocumentFormats.
Allow read for all supported file formats /**.[xX][zZ] r,

** Affects: evince (Ubuntu)
 Importance: Undecided
 Status: New

** Patch added: Patch to apply to file in debian subdirectory of Evince source 
package
   https://bugs.launchpad.net/bugs/1252771/+attachment/3912669/+files/patch

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1252771

Title:
  Permission denied reading pdf.xz files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1252771/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 1252771] Re: Permission denied reading pdf.xz files

2013-11-19 Thread Martin Thornton
Additional patch to allow saving copies of files from Evince in pdf.xz
format.

source package file: debian/apparmor-profile
installed file: /etc/apparmor.d/usr.bin.evince

Again, apply patch to debian subdirectory of source package.

** Attachment added: Additional patch to allow saving in .xz.pdf format
   
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1252771/+attachment/3912705/+files/patch2

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1252771

Title:
  Permission denied reading pdf.xz files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1252771/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs


[Bug 444907] Re: PDF files with wrong extension fail to load

2013-11-19 Thread Martin Thornton
Seems to be an intentional security feature. File extensions are
restricted by the files /etc/apparmor.d/usr.bin.evince and
/etc/apparmor.d/abstractions/evince.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/444907

Title:
  PDF files with wrong extension fail to load

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/444907/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs