Evince is unable to open external links, "Permission denied"

[Jeremy Nickurak]

Binary package hint: evince

I have a script called "epi-tab.sh" that opens URLs differently based on some user-specified criteria. It is configured via System:Preferences:Preferred Applications.

Attempting to open a URL from evince results in an error message: "Unable to open external link -- Failed to execute child process "/home/atrus/notes/epi-tab.sh" (Permission denied)"

Whatever browser I have configured in "Preferred Applications" should be allowed as a URL-opener from evince -- especially since it works everywhere else.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: evince 2.30.3-0ubuntu1.1
ProcVersionSignature: Ubuntu 2.6.32-24.41-generic 2.6.32.15+drm33.5
Uname: Linux 2.6.32-24-generic i686
NonfreeKernelModules: wl
Architecture: i386
Date: Tue Sep 7 12:31:32 2010
InstallationMedia: Ubuntu-Netbook 10.04 "Lucid Lynx" - Alpha i386 (20100113)
KernLog: Sep 7 11:29:29 yeesha kernel: [784303.507291] type=1503 audit(1283884169.863:16): operation="exec" pid=4883 parent=1 profile="/usr/bin/evince" requested_mask="x::" denied_mask="x::" fsuid=1000 ouid=1000 name="/home/atrus/notes/epi-tab.sh"
ProcEnviron:
 LANG=en_CA.utf8
 SHELL=/bin/bash
SourcePackage: evince

[Jamie Strandboge (jdstrand)]

Thank you for using Ubuntu and reporting this bug. Evince is protected by an AppArmor profile which is intended to confine Evince to a known set of executables in an effort to reduce the attack surface for an attacker if there is a flaw in evince or (much more likely) the underlying libraries. This behavior can be adjusted by editing /etc/apparmor.d/usr.bin.evince to have in the "/usr/bin/evince" stanza:
  /home/atrus/notes/epi-tab.sh PUxr,

and then running:
$ sudo apparmor_parser -r -T -W /etc/apparmor.d/usr.bin.evince

Please see https://wiki.ubuntu.com/DebuggingApparmor for more information.