Bug#915024: evince-thumbnailer: Permission denied due to apparmor

[Adrian Immanuel Kiess]

Package: evince
Version: 3.30.2-1
Severity: normal

Dear Maintainer,

   * What led up to the situation?
     Getting apparmor automatically to the system
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
     apt -u dist-upgrade
   * What was the outcome of this action?
     Nemo, nautilus and co no longer generate thumbnails
   * What outcome did you expect instead?
     Working thumbnail generation

currently in Debian/testing evince-thumbnailer and all thumbnail support in the
GNOME or GTK file managers is broken due to apparmor.

The /var/log/syslog output is as follows:

Nov 29 15:16:49 g6 org.freedesktop.thumbnails.Thumbnailer1[30175]: Error
loading document: Failed to create directory '/tmp/evince-thumbnailer-32317':
Permission denied
Nov 29 15:16:49 g6 kernel: [90299.922771] audit: type=1400
audit(1543501009.168:1365): apparmor="DENIED" operation="mkdir"
profile="/usr/bin/evince-thumbnailer" name="/tmp/evince-thumbnailer-32317/"
pid=32317 comm="evince-thumbnai" requested_mask="c" denied_mask="c" fsuid=0
ouid=0

Please adjust apparmor that thumbnail generation is working again. It reports
access to /tmp directory is denied.

I applied a screenshot of the log output to this e-mail.

Thank you very much for efforts.

Yours sincerely,

Adrian Immanuel Kiess



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages evince depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.30.1-1
ii  evince-common                                3.30.2-1
ii  gconf-gsettings-backend [gsettings-backend]  3.2.6-5
ii  gsettings-desktop-schemas                    3.28.1-1
ii  libatk1.0-0                                  2.30.0-1
ii  libc6                                        2.27-8
ii  libcairo-gobject2                            1.16.0-1
ii  libcairo2                                    1.16.0-1
ii  libevdocument3-4                             3.30.2-1
ii  libevview3-3                                 3.30.2-1
ii  libgdk-pixbuf2.0-0                           2.38.0+dfsg-6
ii  libglib2.0-0                                 2.58.1-2
ii  libgnome-desktop-3-17                        3.30.2-1
ii  libgtk-3-0                                   3.24.1-2
ii  libnautilus-extension1a                      3.30.3-1
ii  libpango-1.0-0                               1.42.4-4
ii  libpangocairo-1.0-0                          1.42.4-4
ii  libsecret-1-0                                0.18.6-3
ii  shared-mime-info                             1.10-1

Versions of packages evince recommends:
ii  dbus-user-session [default-dbus-session-bus]  1.12.10-1
ii  dbus-x11 [dbus-session-bus]                   1.12.10-1

Versions of packages evince suggests:
ii  gvfs             1.38.1-1
ii  nautilus-sendto  3.8.6-2
ii  poppler-data     0.4.9-2
ii  unrar            1:5.6.6-1

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bug-debian-evince-thumbnailer-apparmor.png
Type: image/png
Size: 1089165 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20181129/479153b7/attachment-0001.png>