| 2010-08-27 01:11:55 |
Pavel Sherman |
bug |
|
|
added bug |
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
screenshot of error https://bugs.launchpad.net/bugs/625041/+attachment/1521897/+files/Screenshot.png |
|
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
Dependencies.txt https://bugs.launchpad.net/bugs/625041/+attachment/1521898/+files/Dependencies.txt |
|
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
KernLog.txt https://bugs.launchpad.net/bugs/625041/+attachment/1521899/+files/KernLog.txt |
|
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
ProcMaps.txt https://bugs.launchpad.net/bugs/625041/+attachment/1521900/+files/ProcMaps.txt |
|
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
ProcStatus.txt https://bugs.launchpad.net/bugs/625041/+attachment/1521901/+files/ProcStatus.txt |
|
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
RelatedPackageVersions.txt https://bugs.launchpad.net/bugs/625041/+attachment/1521902/+files/RelatedPackageVersions.txt |
|
| 2010-08-27 01:11:55 |
Pavel Sherman |
attachment added |
|
XsessionErrors.txt https://bugs.launchpad.net/bugs/625041/+attachment/1521903/+files/XsessionErrors.txt |
|
| 2010-08-30 09:07:50 |
Sebastien Bacher |
evince (Ubuntu): importance |
Undecided |
Low |
|
| 2010-08-30 09:08:12 |
Sebastien Bacher |
affects |
evince (Ubuntu) |
apparmor (Ubuntu) |
|
| 2010-08-30 12:50:33 |
Jamie Strandboge |
apparmor (Ubuntu): status |
New |
In Progress |
|
| 2010-08-30 12:50:33 |
Jamie Strandboge |
apparmor (Ubuntu): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2010-08-30 13:00:15 |
Jamie Strandboge |
apparmor (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2010-09-03 13:03:00 |
Launchpad Janitor |
apparmor (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2010-09-03 13:16:19 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/apparmor |
|
| 2010-11-02 23:00:01 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Lucid |
|
| 2010-11-02 23:00:01 |
Jamie Strandboge |
bug task added |
|
apparmor (Ubuntu Lucid) |
|
| 2010-11-02 23:02:30 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): importance |
Undecided |
Low |
|
| 2010-11-02 23:02:30 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): status |
New |
In Progress |
|
| 2010-11-02 23:02:30 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): milestone |
|
lucid-updates |
|
| 2010-11-02 23:02:30 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2010-11-03 18:04:02 |
Jamie Strandboge |
description |
Binary package hint: evince
Did a google search in firefox, a pdf link came up. I clicked the link and selected "Open With "Document Viewer (default)". The document opened in Evince without problems. In the pdf document there was a link -- I clicked that link and got the error message "Unable to open external link: Failed to execute child process "sensible-browser" (Permission denied)" (see screenshot).
ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: evince 2.31.90-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.35-19.25-generic 2.6.35.3
Uname: Linux 2.6.35-19-generic x86_64
NonfreeKernelModules: nvidia
Architecture: amd64
Date: Thu Aug 26 21:04:34 2010
ExecutablePath: /usr/bin/evince
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Alpha amd64 (20100803.1)
ProcEnviron:
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: evince |
SRU Justification
1. impact of the bug is low for stable releases, but the fix is non-intrusive. It is included here as part of the 2.5.1 update for Lucid (LP: #660077)
2. This has been addressed in the maverick development cycle and refined in the development release.
3. Patch adds Pixr access to /usr/bin/sensible-browser abstractions/ubuntu-browsers. We use 'Pi' instead of 'PU' because sensible-browser chooses its browser based on an environment variable. Because we use 'i', sensible-browser will inherit the confined application's profile, which then checks the executable. Eg, since evince uses the ubuntu-browsers abstraction, it is allowed to open firefox, but not gdb.
4. TEST CASE:
* Update System/Preferences/Preferred Applications to use '/usr/bin/sensible-browser %u' as the custom command for the browser
* launch sensible-browser from the command line with 'sensible-browser http://www.ubuntu.com'. It should open firefox
* close firefox
* open the attached PDF in evince and click on the http://www.ubuntu.com link. It will not open firefox before the upgrade, but will after. If the firefox profile is enabled, firefox will be confined (see 'sudo aa-status').
5. The regression potential is very low for this patch as it only adds additional access for sensible-browser
Binary package hint: evince
Did a google search in firefox, a pdf link came up. I clicked the link and selected "Open With "Document Viewer (default)". The document opened in Evince without problems. In the pdf document there was a link -- I clicked that link and got the error message "Unable to open external link: Failed to execute child process "sensible-browser" (Permission denied)" (see screenshot).
ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: evince 2.31.90-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.35-19.25-generic 2.6.35.3
Uname: Linux 2.6.35-19-generic x86_64
NonfreeKernelModules: nvidia
Architecture: amd64
Date: Thu Aug 26 21:04:34 2010
ExecutablePath: /usr/bin/evince
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Alpha amd64 (20100803.1)
ProcEnviron:
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: evince
|
|
| 2010-11-03 18:04:17 |
Jamie Strandboge |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2010-11-03 18:04:46 |
Jamie Strandboge |
bug |
|
|
added subscriber SRU Verification |
| 2010-12-03 17:21:46 |
Martin Pitt |
apparmor (Ubuntu Lucid): status |
In Progress |
Fix Committed |
|
| 2010-12-03 17:21:52 |
Martin Pitt |
tags |
amd64 apport-bug maverick |
amd64 apport-bug maverick verification-needed |
|
| 2010-12-14 20:48:23 |
Martin Pitt |
tags |
amd64 apport-bug maverick verification-needed |
amd64 apport-bug maverick verification-done |
|
| 2010-12-15 11:50:58 |
Launchpad Janitor |
apparmor (Ubuntu Lucid): status |
Fix Committed |
Fix Released |
|
| 2011-09-19 21:27:24 |
Ubuntu Foundations Team Bug Bot |
tags |
amd64 apport-bug maverick verification-done |
amd64 apport-bug maverick testcase verification-done |
|
