Ubuntu
evince package

Apparmor prevents evince from opening bzip2 compressed PDFs

Bug #480270 reported by Kai Jauch
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
evince (Ubuntu)
Fix Released
Low
Jamie Strandboge
Karmic
Fix Released
Low
Jamie Strandboge
Ubuntu karmic-updates
Lucid
Fix Released
Low
Jamie Strandboge

Bug Description

Binary package hint: evince

Evince can't open compressed PDFs because apparmor doesn't let it execute bzip2.

[172782.885301] type=1503 audit(1257885293.523:55): operation="exec" pid=22803 parent=22802 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/bin/bzip2"

Steps to reproduce:
1. Download a compressed PDF (e.g. http://people.redhat.com/mclasen/user-account3.pdf.bz2)
2. Double-click on it in nautilus
3. Evince starts and complains about not being able do execute bzip2 (permission denied)

Nautilus also doesn't provide an option to extract the file, so most users probably can't open those files unless they know how to do it manually.

ProblemType: Bug
Architecture: amd64
Date: Tue Nov 10 21:38:08 2009
DistroRelease: Ubuntu 9.10
Package: evince 2.28.1-0ubuntu1.1
ProcEnviron:
 PATH=(custom, user)
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48+ureadahead2-generic
SourcePackage: evince
Uname: Linux 2.6.31-14-generic x86_64

Revision history for this message
Kai Jauch (kaijauch) wrote :
Sebastien Bacher (seb128)
Changed in evince (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
assignee: Jamie Strandboge (jdstrand) → nobody
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for using Ubuntu and taking the time to report a bug. Can you add this to /etc/apparmor.d/abstractions/evince:
  /bin/bzip2 ixr,

then perform:
$ sudo apparmor_parser -r -T -W /etc/apparmor.d/usr.bin.evince

and report back if it fixes the problem for you?

tags: added: apparmor
removed: amd64 apport-bug
Changed in evince (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
status: New → Incomplete
summary: - Apparmor prevents evince from opening compressed PDFs
+ Apparmor prevents evince from opening bzip2 compressed PDFs
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Actually, that is not enough, please adjust /etc/apparmor.d/abstractions/evince to have:
  /bin/bzip2 ixr,
  /**.[bB][zZ]2 r,

and /etc/apparmor.d/usr.bin.evince to have in the '/usr/bin/evince {' section:
  /**.[bB][zZ]2 rw,

then perform:
$ sudo apparmor_parser -r -T -W /etc/apparmor.d/usr.bin.evince

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

I can confirm this. I'll attach a debdiff shortly.

Changed in evince (Ubuntu):
status: Incomplete → Triaged
Revision history for this message
Jamie Strandboge (jdstrand) wrote :
Sebastien Bacher (seb128)
Changed in evince (Ubuntu):
importance: Undecided → Low
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

SRU

Impact: users cannot open bzip2 compressed files with evince

Fixed in 2.29.1-0ubuntu2 by adjusting the profile to allow ixr access to /bin/bzip2 and allow bz2 extensions.

TEST CASE: Download the file mentioned in the description: http://people.redhat.com/mclasen/user-account3.pdf.bz2, save it to disk and try to open the file.

Regression potential is considered very low. The changes to the profile are small and we are only adding more access.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 2.29.1-0ubuntu2

---------------
evince (2.29.1-0ubuntu2) lucid; urgency=low

  * debian/apparmor-profile*: adjust to allow opening of bzip2 compressed
    files (LP: #480270)
 -- Jamie Strandboge <email address hidden> Tue, 10 Nov 2009 16:59:26 -0600

Changed in evince (Ubuntu):
status: Triaged → Fix Released
Sebastien Bacher (seb128)
Changed in evince (Ubuntu Karmic):
importance: Undecided → Low
status: New → Fix Committed
assignee: nobody → Jamie Strandboge (jdstrand)
Jamie Strandboge (jdstrand)
Changed in evince (Ubuntu Karmic):
milestone: none → karmic-updates
Revision history for this message
Martin Pitt (pitti) wrote : Please test proposed package

Accepted evince into karmic-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

tags: added: verification-needed
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

2.28.1-0ubuntu1.2 from -proposed now allows bz2 compressed files to be opened.

Martin Pitt (pitti)
tags: added: verification-done
removed: verification-needed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 2.28.1-0ubuntu1.2

---------------
evince (2.28.1-0ubuntu1.2) karmic-proposed; urgency=low

  * debian/patches/90_git_change_printer_improvements.patch:
    - git changes to fix several printing issues should make orientation
      behave correctly (lp: #430811)

  [ Jamie Strandboge ]
  * debian/apparmor-profile*: adjust to allow opening of bzip2 compressed
    files (LP: #480270)
 -- Sebastien Bacher <email address hidden> Tue, 10 Nov 2009 16:21:06 -0600

Changed in evince (Ubuntu Karmic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.