apparmor denies evince a chmod operation
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
evince (Ubuntu) |
Expired
|
Undecided
|
Unassigned |
Bug Description
Hi,
Recently I have enable Apparmor notify to desktop and when a pdf is open by evice a message appear.
Not sure how it happens but since I enabled the apparmor notify to desktop I realized that an error is raised.
This appens for any pdf document is open.
A chmod operation is denied on a /tmp sub-folder
Any error is in this form:
[ 5148.214512] type=1400 audit(139219805
I do not know if this error can be the source of a malfunction of the program, which is why I reported the problem.
My system is Ubuntu 12.04 LTS (updated to last available packages):
lsb_release -rd:
Description: Ubuntu 12.04.4 LTS
Release: 12.04
uname -a:
Linux ...... 3.2.0-58-generic #88-Ubuntu SMP Tue Dec 3 17:37:58 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
and evince is the standard package
dpkg -l|grep evince:
ii evince 3.4.0-0ubuntu1.7 Document (PostScript, PDF) viewer
ii evince-common 3.4.0-0ubuntu1.7 Document (PostScript, PDF) viewer - common files
ii libevince3-3 3.4.0-0ubuntu1.7 Document (PostScript, PDF) rendering library
as apparmor
dpkg -l|grep apparmor:
ii apparmor 2.7.102-0ubuntu3.9 User-space parser utility for AppArmor
ii apparmor-notify 2.7.102-0ubuntu3.9 AppArmor notification system
ii apparmor-profiles 2.7.102-0ubuntu3.9 Profiles for AppArmor Security policies
ii apparmor-utils 2.7.102-0ubuntu3.9 Utilities for controlling AppArmor
ii dh-apparmor 2.7.102-0ubuntu3.9 AppArmor debhelper routines
ii libapparmor-perl 2.7.102-0ubuntu3.9 AppArmor library Perl bindings
ii libapparmor1 2.7.102-0ubuntu3.9 changehat AppArmor library
Thanks
Enrico
description: | updated |
Changed in evince (Ubuntu): | |
status: | Expired → Incomplete |
Changed in evince (Ubuntu): | |
status: | Incomplete → Expired |
I cannot reproduce this and it actually looks like a legitimate denial. How have you configured your environment so that /tmp/at-spi2/ is being used and why is evince trying to chmod it?