Evince can't open .tif files - Permission denied

[tdlrali]

Binary package hint: evince

This is related to Evince/Document Viewer (2.28.1) on Karmic.

Trying to a open .tif file with Evince fails with the message "Unable to open document - Error opening file: Permission denied".
Relevant dmesg lines:
[ 1942.288959] type=1503 audit(1256922544.460:88): operation="open" pid=7119 parent=1 profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::" fsuid=1000 ouid=1000 name=2F6D6E742F646174612F4D792044726F70626F782F556E692F45787068797320492F4578706879732D3039313033302D616C6C2E746966
[ 1942.289193] type=1503 audit(1256922544.460:89): operation="open" pid=7119 parent=1 profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::" fsuid=1000 ouid=1000 name=2F6D6E742F646174612F4D792044726F70626F782F556E692F45787068797320492F4578706879732D3039313033302D616C6C2E746966

This seems to be caused by the evince apparmor profile, since both
a) renaming the file to .tiff and
b) adding the line "/**.[tT][iI][fF] rw," to /etc/apparmor.d/usr.bin.evince
solves the problem.

Since .tif is a common (valid?) extension for .tiff files, should the apparmor profiles be changed? Or is something else causing this?

Felix N.

[Jamie Strandboge (jdstrand)]

Thank you for using Ubuntu and taking the time to report a bug. I'll get this fixed in an SRU for 9.10.

[C de-Avillez (hggdh2)]

Er. Just curious. I was looking at this, and I see my apparmour already has the entry for tiff.

[C de-Avillez (hggdh2)]

oh, forget. It's 'tiff, not 'tif'. Duh.

[tdlrali (tdlrali)]

Sorry, I originally posted the bug with the apparmor entry for .tiff, instead of .tif. I changed it in the description as soon as I noticed my mistake.

[Jamie Strandboge (jdstrand)]

SRU REQUEST

1. Users of evince are unable to access .tif files outside of $HOME. The fix is trivial

2. The fix is not in Lucid yet

3. The fix is to add the following to debian/apparmor-profile.abstraction:
  /**.[tT][iI][fF] r,

and to debian/apparmor-profile:
  /**.[tT][iI][fF] rw,

4. TEST CASE:
- obtain a tiff file, and copy it to /mnt/foo.tif
- open it in evince with 'evince /mnt/foo.tif'

5. The regression potential is very low. We only allow access to files that we didn't previously have access to.

[Jamie Strandboge (jdstrand)]

Uploaded 2.28.1-0ubuntu1.1 to karmic-proposed.

[Martin Pitt (pitti)]

Accepted evince into karmic-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Pedro Villavicencio (pedro)]

Tried the test case provided by Jamie on comment #5, with previous package I got a "permission denied" message on evince ui. After installed the proposed version and tried the test case again it works ok, the tif document is opened works ok with .tiff as well. Marking this as verification-done, thanks all!.

[Launchpad Janitor (janitor)]

This bug was fixed in the package evince - 2.28.1-0ubuntu1.1

---------------
evince (2.28.1-0ubuntu1.1) karmic-proposed; urgency=low

  * debian/apparmor-profile*: adjust to allow opening of .tif files, not just
    .tiff (LP: #465192)

 -- Jamie Strandboge <email address hidden> Tue, 03 Nov 2009 16:25:24 -0600

[Martin Pitt (pitti)]

Jamie, please commit the patch to lucid's bzr as well and upload. Thanks!

[Jamie Strandboge (jdstrand)]

This was fixed in 2.29.1-0ubuntu1 on Lucid.