Chromium browser abstraction doesn't have correct path

[crashsystems]

Binary package hint: evince

I have Chromium (from the daily PPA) set as my default browser. When I click on a link inside a PDF opened by evince, I get the following error: Failed to execute child process "chromium-browser" (Permission denied)'. Also, I see the following from /var/log/syslog:

Nov 25 21:11:13 crashsystems-laptop kernel: [22919.614722] type=1502 audit(1259201473.363:1637): operation="file_perm" pid=6983 parent=6982 profile="/usr/bin/evince//null-16" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/usr/bin/chromium-browser"

When I set Firefox as the default browser, links open just fine. Also, when I have Chromium as default and disable the AppArmor profile for evince (following these instructions: https://help.ubuntu.com/community/AppArmor#Disable one profile), the link loads just fine.

Bug #432778 looks related, but it is marked as fixed released, and I am still experiencing this issue.

ProblemType: Bug
Architecture: amd64
Date: Wed Nov 25 21:26:39 2009
DistroRelease: Ubuntu 9.10
NonfreeKernelModules: wl
Package: evince 2.28.1-0ubuntu1.2
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
SourcePackage: evince
Uname: Linux 2.6.31-15-generic x86_64
mtime.conffile..etc.apparmor.d.usr.bin.evince: 2009-11-25T21:10:38.851181

[Micah Gersten (micahg)]

Thanks for reporting this bug and any supporting documentation. Since this bug has enough information provided for a developer to begin work, I'm going to mark it as Triaged and let them handle it from here. Thanks for taking the time to make Ubuntu better! Please report any other issues you may find.

It appears the current abstraction for chromium is:
/usr/lib/chromium-browser/chromium-browser Ux,

[Jamie Strandboge (jdstrand)]

This was fixed in 2.3.1+1403-0ubuntu29:

apparmor (2.3.1+1403-0ubuntu29) lucid; urgency=low

  * parser/Makefile: generate af_names.h based on bits/socket.h since
    linux/socket.h no longer has what we need (LP: #474751)
  * usr.sbin.dnsmasq: fully address LP: #445818
    - more pidfile refinements
    - allow access to /var/run/dnsmasq
    - allow access to /etc/dnsmasq.d
    - allow dac_override so it can write its pidfile
  * abstractions/ubuntu-browsers: add chromium-browser

[crashsystems (crashsystems)]

The status on this bug says fixed released, but I just ran updates, and am still experiencing this issue. Is the package with the fix waiting in line on the build servers?

[Micah Gersten (micahg)]

Fix Released means fix in the latest development release (Lucid). Please click Nominate For Release if you'd like this in Karmic.

[Jamie Strandboge (jdstrand)]

While the change was committed to bzr, 2.3.1+1403-0ubuntu29 did not actually contain the fix. This will be fixed in the next upload for Lucid.

[Micah Gersten (micahg)]

I'll prepare this for karmic when it makes it into Lucid.

[Launchpad Janitor (janitor)]

This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu30

---------------
apparmor (2.3.1+1403-0ubuntu30) lucid; urgency=low

  [ Jamie Strandboge ]
  * convert to using quilt
    - debian/control: Build-Depends on quilt
    - add debian/README.source
    - debian/rules: include /usr/share/quilt/quilt.make and adjust
      targets for patching
  * debian/patches/0001-likewise-home-tunables.patch: tunables/home: add
    /home/likewise-open/*/ to HOMEDIRS (LP: #274350)
  * Merge to upstream bzr rev 1308.
    - really add chromium-browser (LP: #488559)
    - add official google-chrome (LP: #481661)

  [ Kees Cook ]
  * parser/parser_main.c: use nanosec ctime resolution when checking
    cache file times.
  * parser/tst/caching.sh: add tests for cache use based on timestamps.
 -- Jamie Strandboge <email address hidden> Fri, 04 Dec 2009 11:11:01 -0600

[Jiahua Huang (huangjiahua)]

Hi, I had prepare this for karmic in ppa:linux-deepin
https://launchpad.net/~linux-deepin/+archive/ppa/+sourcepub/956668/+listing-archive-extra

[Rolf Leggewie (r0lf)]

karmic has seen the end of its life and is no longer receiving any updates. Marking the karmic task for this ticket as "Won't Fix".