evince dbus policy denies access to avahi and colord when printing

Bug #1235216 reported by Jamie Strandboge on 2013-10-04
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
evince (Ubuntu)
High
Tyler Hicks
Saucy
High
Tyler Hicks

Bug Description

The following policy (or similar) should be added to evince:
/{,var/}run/dbus/system_bus_socket rw,
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=Hello
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=GetNameOwner
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/{db,DB}us
       interface=org.freedesktop.DBus
       member={Add,Remove}Match
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=NameHasOwner
       peer=(name=org.freedesktop.DBus),
  dbus (send)
       bus=system
       path=/org/freedesktop/DBus
       interface=org.freedesktop.DBus
       member=StartServiceByName
       peer=(name=org.freedesktop.DBus),
  dbus (receive)
       bus=system
       interface=org.freedesktop.Avahi**,
  dbus (send)
       bus=system
       peer=(name=org.freedesktop.Avahi),
  dbus (receive, send)
       bus=system
       path=/org/freedesktop/ColorManager,

Changed in evince (Ubuntu Saucy):
importance: Undecided → High
assignee: nobody → Tyler Hicks (tyhicks)
tags: added: apparmor
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 3.10.0-0ubuntu2

---------------
evince (3.10.0-0ubuntu2) saucy; urgency=low

  * debian/apparmor-profile: Update evince profiles
    - Include the AppArmor dbus-accessibility abstraction in the evince and
      evince-previewer profiles to gain access to the accessibility bus
      (LP: #1226141)
    - Include the AppArmor dbus abstraction in the evince profile to gain
      access to the system bus for avahi and colord when printing
      (LP: #1235216)
    - Include the AppArmor dbus-session abstraction in the evince-thumbnailer
      profile to gain access to the session bus (LP: #1236082)
 -- Tyler Hicks <email address hidden> Sun, 06 Oct 2013 14:26:18 -0700

Changed in evince (Ubuntu Saucy):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers