This bug was fixed in the package evince - 2.32.0-0ubuntu10
---------------
evince (2.32.0-0ubuntu10) natty; urgency=low
* debian/apparmor-profile.abstraction: allow read of @{PROC}/[0-9]*/status
* debian/apparmor*: more strictly confine the thumbnailer, in particular
with regard to networking (LP: #720961)
- move a bunch of abstractions from the evince abstraction into the
evince and evince-previewer profiles
- move yelp and bug-buddy execs to evince and evince-previewer profiles
- deny reads to /etc/passwd and /etc/nsswitch.conf. These are caused by
calls to getuid() and geteuid() from gnome libraries, but the
thumbnailer doesn't actually need them
-- Jamie Strandboge <[email protected]> Thu, 17 Feb 2011 17:34:12 -0600
** Changed in: evince (Ubuntu Natty)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/720961
Title:
please relocate "nameservice" usage in evince AppArmor profile
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
