Apparmor profile denies PDFs opened through Firefox

Bug #433316 reported by Jonathan Davies
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
evince (Ubuntu)
Invalid
Medium
Jamie Strandboge

Bug Description

Binary package hint: evince

Evince cannot open up a PDF that is opened when clicking a URL in Firefox.

For example:

http://www.level3.com/downloads/eu_map.pdf

Brings up Evince with:

Unable to open document
Error opening file: Permission denied

And dmesg shows:

[15319.003824] type=1503 audit(1253404913.840:154): operation="open" pid=25012 parent=25010 profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::" fsuid=1000 ouid=1000 name="~/.mozilla/firefox/tz2nzw8f.default/Cache/2601F4C5d02"

Jonathan Davies (jpds)
Changed in evince (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → Medium
status: New → Confirmed
summary: - Apparmor profile denys PDFs downloaded with Firefox
+ Apparmor profile denies PDFs opened through Firefox
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This works fine here. Can you perform 'apport-collect -p evince 433316' and also attach the output of 'sudo apparmor_status'?

Changed in evince (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Jonathan Davies (jpds) wrote :
Revision history for this message
Jonathan Davies (jpds) wrote :

Doing your apport command doesn't do much:

Bug title: Apparmor profile denies PDFs opened through Firefox
Collecting apport information for source package evince...
No additional information collected.

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Perhaps it is because apport is not enabled on your system. Can you perform:
$ sudo force_start=1 /etc/init.d/apport start
$ apport-collect -p evince 433316

If that doesn't work, can you attach the output of:
$ cat/var/log/kern.log | grep audit

When I click the link to the PDF you provided in your description with firefox, evince opens in its own window and does not seem to load from cache. Are there other steps I should take to reproduce the bug?

Revision history for this message
Jonathan Davies (jpds) wrote :
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

From IRC:
12:13 < jpds> jdstrand: No... that's the problem, PDFs just don't load.
12:14 < jdstrand> jpds: what I'm saying is they *do* load fine here. I'd like
                  to know what I need to do differently to reproduce the bug
12
:14 < jpds> Hmm, not sure what I could of done to change the apparmor
              profiles, I reinstalled Karmic last week.
12:15 < jdstrand> ps auxww|grep evince
12:15 < jdstrand> jamie 27573 14.0 0.6 385680 26180 ? Sl 12:14
                  0:03 evince file:///tmp/eu_map-3.pdf
12:15 < jdstrand> jpds: ie, it isn't loading from cache
12:16 < jdstrand> jpds: let me rephrase
12:16 < jpds> jdstrand: I see.
12:16 < jpds> jdstrand: I'll go and check what's wrong with my config.
12:16 < jdstrand> jpds: the file seems to be copied from cache, into /tmp, and
                  then loaded
12:17 < jdstrand> jpds: yeah, I just removed all the pdfs in /tmp, then clicked
                  on the link, it opened instantly (ie, I didn't have to
                  redownload it) and it worked fine

Revision history for this message
Jonathan Davies (jpds) wrote :

Looks like something wrong with my configuration, which isn't putting files in /tmp

Changed in evince (Ubuntu):
status: Incomplete → Invalid
Changed in evince (Ubuntu):
status: Invalid → Confirmed
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.