Public bug reported:

/etc/apparmor.d/usr.bin.evince has a line

  @{HOME}/.local/share/gvfs-metadata/** l,

However, it is possible (seen on trusty) for session state files to be stored 
under /run/user/<uid>/ instead of ~/.local/share/ . Please consider adding
  owner /run/user/*/gvfs-metadata/** l,
to the apparmor profile.

Moreover (but this may be worth discussing and tracking separately) I've
seen evince being denied "r" access to gvfs-
metadata/home-[[:xdigit:]]+.log . I'm not sure what it needs that access
for, but maybe there is a legitimate need?

** Affects: evince (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apparmor

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in Ubuntu.
https://bugs.launchpad.net/bugs/1344810

Title:
  etc/apparmor.d/usr.bin.evince should allow /run/user/*/gvfs-
  metadata/**

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1344810/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to