Apparmor profile disallows hyperlinks

[Jonathan Davies]

Binary package hint: evince

The new apparmor profile for evince in Karmic does not allow one to open a web browser, when clicking a hyperlink within a PDF document. evince reports: "Unable to open external link, failed to open child process 'firefox' (Permission denied)".

dmesg shows:

[ 2013.315869] type=1503 audit(1250352178.105:41): operation="exec" pid=11439 parent=11438 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/lib/firefox-3.5.2/firefox.sh"

[Launchpad Janitor (janitor)]

This bug was fixed in the package evince - 2.27.90-0ubuntu4

---------------
evince (2.27.90-0ubuntu4) karmic; urgency=low

  * debian/apparmor-profiles.abstraction and debian/apparmor-profiles:
    allow reading of comic book archives (LP: #413948)
  * debian/apparmor-profiles: allow opening of hyperlinks (LP: #414114)

 -- Jamie Strandboge <email address hidden> Mon, 17 Aug 2009 16:16:38 -0500

[Janne Hyötylä (janne-hyotyla)]

This still does not work if using another default browser (Opera in my case) -- I opened Bug #462675

[Daniel Castro (castromd)]

I just upgraded my Firefox using Ubuntuzilla and this started to happen.

Any ideas?

[Jamie Strandboge (jdstrand)]

Daniel, this is a different issue. Ubuntuzilla is not a supported upgrade path for mozilla in Ubuntu. That said, you can follow https://wiki.ubuntu.com/DebuggingApparmor and update the profile yourself or optionally disable it.

[Daniel Castro (castromd)]

Thanks Jamie. That makes sense. I'll see if there is an apparmor bug already for evince profile and if not open one.