PDF allows attaching arbitrary files to PDF files.
Right-clicking onto an attachment's icon and saving the file, opening it manually works, but left-clicking doesn't work because evince will save the file to /tmp and start the preferred application automatically, this doesn't work:
apparmor="DENIED" operation="exec" parent=1 profile="/usr/bin/evince" name="/usr/bin/gedit" pid=9128 comm="evince" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
A workaround is (as root)
# echo "/usr/bin/gedit ixr," >> /etc/apparmor.d/local/usr.bin.evince
# service apparmor reload
But of course image attachments still don't work etc.
Maybe the list of allowed applications evince can start to show attachments should include a useful list of other audited applications.
(Or should this be an evince bug?)
This bug was fixed in the package evince - 3.2.1-1ubuntu5
---------------
evince (3.2.1-1ubuntu5) precise; urgency=low
* debian/
- allow owner read of @{PROC}/[0-9]*/auxv
- use PUx for yelp instead of Ux
- explicitly deny reads to /run/udev/data/** (LP: #883045)
- allow PUx for nautilus for evince (LP: #864992)
- allow ixr of gedit for text attachments (LP: #837549)
-- Jamie Strandboge <email address hidden> Wed, 04 Jan 2012 11:01:38 -0600