Apparmor is denying evince from running vivaldi

[luagwoandersch]

It's similar to this bug https://bugs.launchpad.net/bugs/1432126 or discussed here; https://forum.vivaldi.net/topic/33591/vivaldi-opening-from-a-link-in-a-pdf-file/7

Apparmor is denying evince from running vivaldi by clicking on a http link

kernel: [ 3271.799807] audit: type=1400 audit(1548434352.941:114): apparmor="DENIED" operation="exec" profile="/usr/bin/evince" name="/opt/vivaldi/vivaldi" pid=6795 comm="exo-helper-1" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Description: Ubuntu 18.04.1 LTS
Release: 18.04
vivaldi-stable: 2.2.1388.37-1
apparmor: 2.12-4ubuntu5.1
evince: 3.28.4-0ubuntu1

[Jamie Strandboge (jdstrand)]

The path to vivaldi indicates that the application you are trying to launch is not in the Ubuntu repositories. To accommodate this sort of thing, apparmor profiles in Ubuntu ship files in /etc/apparmor.d/local for admins to modify. I suggest adding this to /etc/apparmor.d/local/usr.bin.evince:

  /opt/vivaldi/vivaldi PUxr,

then running:

  sudo apparmor_parser -r /etc/apparmor.d/usr.bin.evince # ie, without 'local/'

The PUxr rule will allow evince to launch vivaldi unconfined ('U') unless a profile is already defined for it ('P').

[luagwoandersch (luagwoandersch)]

Thank you for the reply! The evince (3.28.4-0ubuntu1.2) update done the trick.
So your suggested fix isn't needed anymore in this constellation.

[TomasHnyk (sup)]

That is a very suboptimal solution. for the average user, it just does not work.