[pkg-apparmor] Bug#871548: Cannot open links in evince (PDF) when chromium is default browser

[Phil Wyett]

Package: apparmor
Version: 2.11.0-3
Severity: important

Cannot open links via evince (PDF) when chromium is default browser.

Click on hyperlink in a PDF within evince.

Error message from logs:

audit: type=1400 audit(1502242013.372:60): apparmor="DENIED"
operation="exec" profile="/usr/bin/evince" name="/usr/bin/chromium"
pid=3986 comm="evince" requested_mask="x" denied_mask="x"
fsuid=1000 ouid=0

Cause:

Apparmor has not been updated to take account of path/naming of latest chromium
package.

Workaround/Fix:

To file:

/etc/apparmor.d/abstractions/ubuntu-helpers

add:

/usr/lib/chromium/chrome-sandbox PUxr,

To file:

/etc/apparmor.d/abstractions/ubuntu-browsers

add:

/usr/bin/chromium Cx -> sanitized_helper,
/usr/lib/chromium/chromium Cx -> sanitized_helper,

If you apply the fix manually as I have had to, do:

sudo systemctl restart apparmor.service

This is a lack of communication between teams.

Regards

Phil

-- 
*** If this is a mailing list, I am subscribed, no need to CC me.***

Playing the game for the games sake.

Web: https://kathenas.org

Twitter: kathenasorg

Instagram: kathenasorg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-apparmor-team/attachments/20170809/77f21400/attachment.sig>