evince dbus policy denies access to avahi and colord when printing

Bug #1235216 reported by Jamie Strandboge
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
evince (Ubuntu)
Fix Released
High
Tyler Hicks
Saucy
Fix Released
High
Tyler Hicks

Bug Description

The following policy (or similar) should be added to evince:
/{,var/}run/dbus/system_bus_socket rw,
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=Hello
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=GetNameOwner
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/{db,DB}us
       interface=org.freedesktop.DBus
       member={Add,Remove}Match
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=NameHasOwner
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=StartServiceByName
       peer=(name=org.freedesktop.DBus),
  dbus (receive)
       bus=system
       interface=org.freedesktop.Avahi**,
  dbus (send)
       bus=system
       peer=(name=org.freedesktop.Avahi),
  dbus (receive, send)
       bus=system
       path=/org/freedesktop/ColorManager,

Tags: apparmor
Changed in evince (Ubuntu Saucy):
importance: Undecided → High
assignee: nobody → Tyler Hicks (tyhicks)
tags: added: apparmor
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 3.10.0-0ubuntu2

---------------
evince (3.10.0-0ubuntu2) saucy; urgency=low

  * debian/apparmor-profile: Update evince profiles
    - Include the AppArmor dbus-accessibility abstraction in the evince and
      evince-previewer profiles to gain access to the accessibility bus
      (LP: #1226141)
    - Include the AppArmor dbus abstraction in the evince profile to gain
      access to the system bus for avahi and colord when printing
      (LP: #1235216)
    - Include the AppArmor dbus-session abstraction in the evince-thumbnailer
      profile to gain access to the session bus (LP: #1236082)
 -- Tyler Hicks <email address hidden> Sun, 06 Oct 2013 14:26:18 -0700

Changed in evince (Ubuntu Saucy):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.