Public bug reported:

Binary package hint: evince

The Zotero reference manager is an extension for firefox to make it easy to 
collect/manage academic papers and related metadata:
  http://www.zotero.org/
It stores downloaded PDFs under 
~/.mozilla/firefox/<whatever>.default/zotero/storage

Since upgrading to karmic, I can no longer open any of my papers stored
in Zotero, because the evince apparmor profile apparently disallows
access to files with this kind of path.

If I try, evince prints to the terminal a message like:
  Error: Couldn't open file 
'/home/njs/.mozilla/firefox/ywm6cmff.default/zotero/storage/11684/Bailey and 
Hahn - 2005 - Phoneme similarity and confusability.pdf': Permission denied.
and in the GUI displays 
  Unable to open document
  Error opening file: Permission denied

If I run aa-complain /usr/bin/evince, then opening such files works again -- 
the problem is a line in abstractions/private-files-strict:
    audit deny @{HOME}/.mozilla/** mrwkl,

I suppose the ideal solution would be for zotero to move its database
out to a more sensible location. In the mean time, for karmic I suggest
allowing rw access to @{HOME}/.mozilla/**/zotero/** so that files in the
zotero database are treated like ordinary home directories.

Here are the relevant lines out of dmesg:

[82211.697841] type=1503 audit(1255328281.905:3389): operation="open" pid=32137 
parent=1 profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::" 
fsuid=1000 ouid=1000 
name=2F686F6D652F6E6A732F2E6D6F7A696C6C612F66697265666F782F79776D36636D66662E64656661756C742F7A6F7465726F2F73746F726167652F31333938352F5361636B7320657420616C202D2031393734202D20412053696D706C6573742053797374656D617469637320666F7220746865204F7267616E697A6174696F6E206F66205475722E706466
[82211.698278] type=1503 audit(1255328281.905:3390): operation="open" pid=32137 
parent=1 profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::" 
fsuid=1000 ouid=1000 
name=2F686F6D652F6E6A732F2E6D6F7A696C6C612F66697265666F782F79776D36636D66662E64656661756C742F7A6F7465726F2F73746F726167652F31333938352F5361636B7320657420616C202D2031393734202D20412053696D706C6573742053797374656D617469637320666F7220746865204F7267616E697A6174696F6E206F66205475722E706466

ProblemType: Bug
Architecture: amd64
Date: Sun Oct 11 22:55:57 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/evince
Package: evince 2.28.0-0ubuntu2
ProcEnviron:
 PATH=(custom, user)
 SHELL=/usr/bin/zsh
 LANG=en_US.UTF-8
ProcVersionSignature: Ubuntu 2.6.31-13.43-generic
SourcePackage: evince
Uname: Linux 2.6.31-13-generic x86_64
mtime.conffile..etc.apparmor.d.usr.bin.evince: 2009-10-11T22:54:17

** Affects: evince (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug

-- 
[karmic] evince apparmor profile breaks zotero reference database
https://bugs.launchpad.net/bugs/449286
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to