More image viewers should be in ubuntu-browsers whitelist

[Jeremy Bícha]

Binary package hint: apparmor

When the apparmor profile for Firefox is enabled, Shotwell cannot be used to open image files. In fact, it looks like only eog and gimp are on the imageviewer whitelist. Several others should be included. I believe Digikam is the default Kubuntu image editor for instance.

Apr 8 13:56:4 kernel: [21140.095278] type=1400 audit(1302285401.828:38): apparmor="DENIED" operation="exec" parent=11748 profile="/usr/lib/firefox-4.0/firefox{,*[^s][^h]}" name="/usr/bin/shotwell" pid=11749 comm="firefox-bin" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: apparmor 2.6.1-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.38-8.41-generic 2.6.38.2
Uname: Linux 2.6.38-8-generic x86_64
Architecture: amd64
Date: Fri Apr 8 14:00:53 2011
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
ProcEnviron:
 LANGUAGE=en_US:en
 PATH=(custom, user)
 LANG=en_GB.utf8
 LC_MESSAGES=en_US.utf8
 SHELL=/bin/bash
ProcKernelCmdline: BOOT_IMAGE=/boot/vmlinuz-2.6.38-8-generic root=UUID=f5f5a49b-02ef-43a4-a8c8-e436a4a08f21 ro quiet splash vt.handoff=7
ProcVersionSignature_: Ubuntu 2.6.38-8.41-generic 2.6.38.2
SourcePackage: apparmor
UpgradeStatus: Upgraded to natty on 2011-01-01 (97 days ago)

[Jamie Strandboge (jdstrand)]

Thank you for using Ubuntu and filing a bug. How are you accessing images to make firefox use shotwell?

[Jeremy Bícha (jbicha)]

I opened a picture in Facebook and clicked the Download link. That opens up the Open with or Save dialog. Since Shotwell is the default handler for jpg's, I opened with Shotwell. I'm having difficulty finding other websites that work that same way.

However, if you save any image and then double-click it in Downloads, Firefox will try to call whatever the default program for that file type is.

[Launchpad Janitor (janitor)]

This bug was fixed in the package apparmor - 2.6.1-0ubuntu3

---------------
apparmor (2.6.1-0ubuntu3) natty; urgency=low

  * debian/patches/0003-add-debian-integration-to-lighttpd.patch: updates for
    lighttpd example profile to work in Debian/Ubuntu (LP: #582814)
  * debian/patches/0004-lp754889.patch: add several image viewers to
    ubuntu-browsers.d/multimedia abstraction (LP: #754889)
  * debian/patches/0005-lp761217.patch: abstractions/private-files updates for
    zsh and several other shells (LP: #761217)
  * debian/patches/0001-add-chromium-browser.patch: fixes for multiarch and
    crash reporter (LP: #764786)
 -- Jamie Strandboge <email address hidden> Mon, 18 Apr 2011 09:23:50 -0500