cannot open internet link in Opera

[Jack Leigh]

Binary package hint: evince

cannot open links from a pdf in Opera

Get error:
'Unable to open external link
Failed to execute child process "opera" (Permission denied)'

ProblemType: Bug
Architecture: i386
Date: Fri Sep 18 23:12:53 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/evince
Package: evince 2.27.90-0ubuntu8
ProcEnviron:
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-10.34-generic
SourcePackage: evince
Uname: Linux 2.6.31-10-generic i686

[Sebastien Bacher (seb128)]

opera probably needs to be added to the trusted binaries list for web browsers

[elrond (elrond.)]

I have the same problem using GNU Icecat. How could I add Icecat to the trusted binaries list for web browsers?

I am running Ubuntu 9.10 Beta, evince version is 2.28.0 and Linux kernel is 2.6.31-13-generic i686

[d-bos (danny-osullivan)]

I have the issue with Opera. If I switch my preferred application to firefox it works. I'm using 2.6.31-13 generic amd64.

[Jamie Strandboge (jdstrand)]

These browsers can be added to /etc/apparmor.d/abstractions/ubuntu-browsers and then reloading the evince profile with:
$ sudo apparmor_parser -r -W -T /etc/apparmor.d/usr.bin.evince

However, neither icecat or opera is a native Ubuntu package. Are there more or less official sources for these packages and what are the locations of the binaries in question?

[Jack Leigh (leighman)]

Opera comes from
http://deb.opera.com/opera/
or
http://snapshot.opera.com/unix/

[elrond (elrond.)]

To install IceCat I use http://gnuzilla.gnu.org/download/debian repository. Binary is located in /usr/bin/icecat.

I added these string to /etc/apparmor.d/abstractions/ubuntu-browsers:
  /usr/bin/icecat Ux,
and run apparmor_parser command but this didn't solve the problem for me.

[Jamie Strandboge (jdstrand)]

elrond, can you attach your /etc/apparmor.d/usr.bin.firefox-3.5 file as well as the output of:
$ grep audit /var/log/kern.log

[elrond (elrond.)]

I haven't /etc/apparmor.d/usr.bin.firefox-3.5 file. Firefox 3.5 is not installed in my system, only Icecat (I also have Firefox 3.6 binary from Mozilla site).

[Jack Leigh (leighman)]

And yeh, /usr/bin/opera

[Jamie Strandboge (jdstrand)]

Oops! I meant to ask for /etc/apparmor.d/usr.bin.evince

[Jamie Strandboge (jdstrand)]

Actually, if you could also include /etc/apparmor.d/abstractions/evince and /etc/apparmor.d/abstractions/ubuntu-browsers, that would be good too.

[Jamie Strandboge (jdstrand)]

elrond:
can you attach the output of 'grep audit /var/log/kern.log' right after you try to use icecat with evince?

[Jamie Strandboge (jdstrand)]

Marking Triaged since the opera part is known. Until a fix is uploaded, opera users can add to /etc/apparmor.d/abstractions/ubuntu-browsers:
  /usr/bin/opera Ux,

Then perform in a terminal:
$ sudo apparmor_parser -r -W -T /etc/apparmor.d/usr.bin.evince

[Jamie Strandboge (jdstrand)]

elrond,

Based on your kern.log, the file being blocked is /usr/lib/icecat-3.5.3/icecat (AppArmor determines the real path of symlinks). As such, please add to /etc/apparmor.d/abstractions/ubuntu-browsers:
  /usr/lib/icecat-*/icecat Ux,

Then perform in a terminal:
$ sudo apparmor_parser -r -W -T /etc/apparmor.d/usr.bin.evince

[elrond (elrond.)]

It works, thanks :)

[Ernst (ernst-blaauw)]

I would also like to have Chromium in the list of support browsers. I installed the browser using this ppa: https://launchpad.net/~chromium-daily/+archive/ppa

[Ernst (ernst-blaauw)]

I just editted the file /etc/apparmor.d/abstractions/ubuntu-browsers, and there was already a line about chromium:
 /usr/lib/chromium-browser/chromium-browser Ux,

However, according to `grep audit /var/log/kern.log`, /usr/bin/chromium-browser was blocked. So, I added the line
/usr/bin/chromium-browser Ux,

and now Evince can open links correctly.

[elrond (elrond.)]

I want to point out that since version 3.5.4 of IceCat installation directory is named /usr/lib/icecat, instead of /usr/lib/icecat-x.x.x, so in file /etc/apparmor.d/abstractions/ubuntu-browsers you need to add this string:
  /usr/lib/icecat/icecat Ux,

[Jamie Strandboge (jdstrand)]

SRU REQUEST

1. Users of evince are unable to launch their preferred browser (icecat and opera). The fix is trivial

2. The fix is no in Lucid yet

3. The fix is to add the following to profiles/apparmor.d/abstractions/ubuntu-browsers
  # some unpackaged, but popular browsers
  /usr/lib/icecat-*/icecat Ux,
  /usr/bin/opera Ux,

4. TEST CASE:
- install opera
- configure Gnome to use opera via System/Preferences/Preferred Applications
- open a PDF with an embedded link (eg http://bazaar.launchpad.net/~ubuntu-bugcontrol/qa-regression-testing/master/files/head%3A/data/test_hyperlink.pdf)

5. The regression potential is very low. We only allow access to files that we didn't previously have access to.

[Jamie Strandboge (jdstrand)]

Uploaded apparmor_2.3.1+1403-0ubuntu27.1 to karmic-proposed.

[Martin Pitt (pitti)]

Accepted apparmor into karmic-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Jack Leigh (leighman)]

Yay! Working nicely :D

[Ernst (ernst-blaauw)]

For chromium (from the chromium-daily ppa), it's not working yet.
I see in /etc/apparmor.d/abstractions/ubuntu-browsers, that there is no
entry for this browser. Can this one also be added to the list?

On Wed, Nov 4, 2009 at 14:38, leighman <email address hidden> wrote:

> Yay! Working nicely :D
>
> --
> cannot open internet link in Opera
> https://bugs.launchpad.net/bugs/432778
> You received this bug notification because you are a direct subscriber
> of the bug.
>

[Jamie Strandboge (jdstrand)]

Ernst, this is a different bug. This line is in /etc/apparmor.d/abstractions/ubuntu-browsers as of apparmor 2.3.1+1403-0ubuntu26:
  /usr/lib/chromium-browser/chromium-browser Ux,

Please file another bug if this is not working for you.

[Ernst (ernst-blaauw)]

I added my experiences to an existing bug report:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/448812

On Wed, Nov 4, 2009 at 15:31, Jamie Strandboge <email address hidden> wrote:

> Ernst, this is a different bug. This line is in
> /etc/apparmor.d/abstractions/ubuntu-browsers as of apparmor
> 2.3.1+1403-0ubuntu26:
> /usr/lib/chromium-browser/chromium-browser Ux,
>
> Please file another bug if this is not working for you.
>
> --
> cannot open internet link in Opera
> https://bugs.launchpad.net/bugs/432778
> You received this bug notification because you are a direct subscriber
> of the bug.
>

[Launchpad Janitor (janitor)]

This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu28

---------------
apparmor (2.3.1+1403-0ubuntu28) lucid; urgency=low

  [ Jamie Strandboge ]
  * update skype profile in extras. Based on work by Андрей Калинин.
    (LP: #226624)
  * abstractions/ubuntu-browsers: add opera and icecat (LP: #432778)
  * abstractions/ubuntu-browsers: add epiphany (epiphany-browser and
    epiphany-webkit were already present, but the recent changes in
    epiphany packaging require /usr/bin/epiphany) (LP: #472952)
  * usr.sbin.dnsmasq: allow pidfiles for /var/run/dnsmasq*.pid (LP: #445818)
  * abstractions/gnome: allow access to ~/.themes (LP: #460125)
  * abstractions/kde: allow access to /etc/kde4rc and /usr/bin/kde4-config
    (LP: #447006)

  [ Marc Deslauriers ]
  * utils/Subdomain.pm: don't skip reading profiles that are also in the
    cache directory (LP: #446449)
  * utils/Subdomain.pm: correctly parse PUxr modes
  * utils/Subdomain.pm: support include directories

 -- Jamie Strandboge <email address hidden> Wed, 04 Nov 2009 11:02:27 -0600

[Launchpad Janitor (janitor)]

This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu27.1

---------------
apparmor (2.3.1+1403-0ubuntu27.1) karmic-proposed; urgency=low

  [ Jamie Strandboge ]
  * abstractions/ubuntu-browsers: add opera and icecat (LP: #432778)
  * abstractions/ubuntu-browsers: add epiphany (epiphany-browser and
    epiphany-webkit were already present, but the recent changes in
    epiphany packaging require /usr/bin/epiphany) (LP: #472952)
  * usr.sbin.dnsmasq: allow pidfiles for /var/run/dnsmasq*.pid (LP: #445818)
  * abstractions/gnome: allow access to ~/.themes (LP: #460125)
  * abstractions/kde: allow access to /etc/kde4rc and /usr/bin/kde4-config
    (LP: #447006)

  [ Marc Deslauriers ]
  * utils/Subdomain.pm: don't skip reading profiles that are also in the
    cache directory (LP: #446449)
  * utils/Subdomain.pm: correctly parse PUxr modes
  * utils/Subdomain.pm: support include directories

 -- Jamie Strandboge <email address hidden> Tue, 03 Nov 2009 14:30:19 -0600

[Psychonaut (psychonaut)]

I am still encountering this problem on Ubuntu 10.04 and Document Viewer 2.30.3 with SeaMonkey, even though seamonkey is already listed out of the box in /etc/apparmor.d/abstractions/ubuntu-browsers. Running sudo apparmor_parser -r -W -T /etc/apparmor.d/usr.bin.evince has no effect on the problem.