[pkg-apparmor] Bug#845250: Bug#845250: apparmor-profiles: can't launch evince when apparmor is enabled

[Steve Beattie]

On Tue, Nov 22, 2016 at 03:04:45PM +0100, intrigeri wrote:
> Félix Sipma:
> > When apparmor is enabled, I can't launch evince. Here is an extract of the
> > logs:
> 
> > [33328.299018] audit: type=1400 audit(1479752613.324:130): apparmor="DENIED"
> > operation="open" profile="/usr/bin/evince" name="/run/user/1000/X11/Xauthority"
> > pid=14782 comm="evince" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> 
> Thanks! Looks like /etc/apparmor.d/abstractions/X needs an update,
> so I'm reassigning this bug to the package that ships that file.

Upstream apparmor has committed a fix for this that adds

  owner /{,var/}run/user/*/X11/Xauthority r,

to abstractions/X.

Committed in trunk rev 3591, apparmor-2.10 branch rev 3367, and
apparmor-2.9 branch rev 3035.

Thanks for the report!

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-apparmor-team/attachments/20161201/21732293/attachment.sig>