touch-packages team mailing list archive

[Launchpad Bug Tracker <1432126@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package apparmor - 2.9.1-0ubuntu8

---------------
apparmor (2.9.1-0ubuntu8) vivid; urgency=medium

  [ Steve Beattie ]
  * debian/rules: run make check on the libapparmor library
  * add-chromium-browser.patch: add support for chromium policies
    (LP: #1419294)
  * debian/apparmor.{init,upstart}: add support for triggering
    aa-profile-hook runs when packages are updated via snappy system
    image updates (LP: #1434143)
  * parser-fix_modifier_compilation_+_tests.patch: fix compilation
    of audit modifiers for exec and pivot_root and deny modifiers on
    link rules as well as significantly expand related tests
    (LP: #1431717, LP: #1432045, LP: #1433829)
  * tests-fix_systemd_breakage_in_pivot_root-lp1436109.patch: work
    around pivot_root test failures due to init=systemd (LP: #1436109)
  * GDM_X_authority-lp1432126.patch: add location GDM creates Xauthority
    file to X abstraction (LP: #1432126)

  [ Jamie Strandboge ]
  * easyprof-framework-policy.patch: add --include-templates-dir and
    --include-policy-groups-dir options to easyprof to support framework
    policy on snappy

  [ Robie Basak ]
  * Add /lib/apparmor/profile-load; moved from
    /lib/init/apparmor-profile-load from the upstart package. A wrapper at
    the original path is now provided by init-system-helpers. (LP: #1432683)
 -- Jamie Strandboge <jamie@xxxxxxxxxx>   Sat, 28 Mar 2015 07:22:30 -0500

** Changed in: apparmor (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1432126

Title:
  Evince denied from opening

Status in AppArmor Linux application security framework:
  Fix Committed
Status in Ubuntu GNOME:
  New
Status in apparmor package in Ubuntu:
  Fix Released

Bug description:
  Apparmor is denying evince from running.

  It initially started when I tried opening a PDF attachment in
  Thunderbird. Saving the file to disk and opening via nautilus renders
  the same result. Trying to just open evince without a file doesn't
  work as well.

  Mar 14 11:10:00 host evince[27787]: <audit-1400> apparmor="DENIED" operation="open" profile="/usr/bin/evince" name="/run/user/1000/gdm/Xauthority" pid=27787 comm="evince" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
  Mar 14 11:10:00 host kernel: audit: type=1400 audit(1426324200.744:33): apparmor="DENIED" operation="open" profile="/usr/bin/evince" name="/run/user/1000/gdm/Xauthority" pid=27787 comm="evince" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
  Mar 14 11:10:00 host evince.desktop[27787]: No protocol specified
  Mar 14 11:10:00 host evince.desktop[27787]: ** (evince:27787): WARNING **: Could not open X display
  Mar 14 11:10:00 host evince[27787]: <audit-1400> apparmor="DENIED" operation="open" profile="/usr/bin/evince" name="/run/user/1000/gdm/Xauthority" pid=27787 comm="evince" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

  ProblemType: Bug
  DistroRelease: Ubuntu 15.04
  Package: apparmor 2.9.1-0ubuntu7
  ProcVersionSignature: Ubuntu 3.19.0-7.7-generic 3.19.0
  Uname: Linux 3.19.0-7-generic x86_64
  ApportVersion: 2.16.2-0ubuntu3
  Architecture: amd64
  CurrentDesktop: GNOME
  Date: Sat Mar 14 11:07:03 2015
  InstallationDate: Installed on 2015-02-08 (33 days ago)
  InstallationMedia: Ubuntu-GNOME 15.04 "Vivid Vervet" - Alpha amd64 (20150207)
  ProcKernelCmdline: BOOT_IMAGE=/boot/vmlinuz-3.19.0-7-generic root=UUID=80974ebe-fd7c-446d-89c5-23bf40b9b915 ro quiet splash
  SourcePackage: apparmor
  Syslog: Mar 14 00:31:22 tanagra dbus[775]: [system] AppArmor D-Bus mediation is enabled
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1432126/+subscriptions