evince reports apparmor denials

[LaMont Jones]

% evince foo.pdf

** (evince:26162): WARNING **: Couldn't register with accessibility bus: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

(evince:26162): EvinceDocument-CRITICAL **: ev_document_get_n_pages: assertion 'EV_IS_DOCUMENT (document)' failed

%

more errors occur if I print the document.

[LaMont Jones (lamont)]

In response to ctl-P:

** (evince:26301): WARNING **: Couldn't connect to D-Bus system bus, GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

** (evince:26301): WARNING **: failed to contact colord: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

** (evince:26301): WARNING **: failed to contact colord: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

** (evince:26301): WARNING **: failed to contact colord: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

** (evince:26301): WARNING **: failed to contact colord: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

** (evince:26301): WARNING **: failed to contact colord: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

** (evince:26301): WARNING **: failed to contact colord: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type="method_call", sender="(null)" (inactive) interface="org.freedesktop.DBus" member="Hello" error name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

[Tyler Hicks (tyhicks)]

AppArmor denial from the accessibility dbus-daemon:

dbus[2835]: apparmor="DENIED" operation="dbus_method_call" bus="accessibility" name="org.freedesktop.DBus" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="Hello" mask="send" pid=14848 profile="/usr/bin/evince" peer_profile="unconfined"

[Guy Schlosser (guyster)]

Has this been fixed or attempted? I am a blind user, who depends on the Orca screen reader to access my documents. Currently I have to disable apparmor to get Evince to work accessibly. Is this how it's gonna be for 13.10?

[Tyler Hicks (tyhicks)]

Hello Guy - a fix is currently in progress and should make it into the Saucy release.

[Tyler Hicks (tyhicks)]

Here's the debdiff containing fixes for this bug and for bug #1235216. It has received the following testing:

- Manual verification of this both fixes
 + Viewing PDFs and printing PDFs
- Passed QRT's test-evince.py

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "evince_3.10.0-0ubuntu2.debdiff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

[Tyler Hicks (tyhicks)]

I should have mentioned that jdstrand will be sponsoring this debdiff. It depends on a change in the apparmor package, which he will also be sponsoring in a different upload.

[Tyler Hicks (tyhicks)]

Updated debdiff containing a fix for bug #1236082. jdstrand will sponsor this debdiff, as it requires a pending apparmor update.

[Launchpad Janitor (janitor)]

This bug was fixed in the package evince - 3.10.0-0ubuntu2

---------------
evince (3.10.0-0ubuntu2) saucy; urgency=low

  * debian/apparmor-profile: Update evince profiles
    - Include the AppArmor dbus-accessibility abstraction in the evince and
      evince-previewer profiles to gain access to the accessibility bus
      (LP: #1226141)
    - Include the AppArmor dbus abstraction in the evince profile to gain
      access to the system bus for avahi and colord when printing
      (LP: #1235216)
    - Include the AppArmor dbus-session abstraction in the evince-thumbnailer
      profile to gain access to the session bus (LP: #1236082)
 -- Tyler Hicks <email address hidden> Sun, 06 Oct 2013 14:26:18 -0700