Bug#908516: Apparmor profile breaks print preview

[Antonio Ospite]

Package: evince
Version: 3.30.0-2
Followup-For: Bug #908516

Dear Maintainer,

this bug also affects opening links in the external browser, which is
rather annoying.

For googling sake, here's the exact error message from the UI:

Failed to execute child process “/usr/lib/x86_64-linux-gnu/glib-2.0/gio-launch-desktop” (Permission denied)

And in the kernel log:

[29389.904351] audit: type=1400 audit(1536848541.036:361): apparmor="DENIED" operation="exec" profile="/usr/bin/evince" name="/usr/lib/x86_64-linux-gnu/glib-2.0/gio-launch-desktop" pid=28068 comm="evince" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

The temporary solution provided the OP works well.

Thanks,
   Antonio

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages evince depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.30.0-1
ii  evince-common                                3.30.0-2
ii  gsettings-desktop-schemas                    3.28.0-1
ii  libatk1.0-0                                  2.30.0-1
ii  libc6                                        2.27-6
ii  libcairo-gobject2                            1.15.12-1
ii  libcairo2                                    1.15.12-1
ii  libevdocument3-4                             3.30.0-2
ii  libevview3-3                                 3.30.0-2
ii  libgdk-pixbuf2.0-0                           2.38.0+dfsg-4
ii  libglib2.0-0                                 2.58.0-3
ii  libgnome-desktop-3-17                        3.30.0-1
ii  libgtk-3-0                                   3.24.0-3
ii  libnautilus-extension1a                      3.30.0-2
ii  libpango-1.0-0                               1.42.4-3
ii  libpangocairo-1.0-0                          1.42.4-3
ii  libsecret-1-0                                0.18.6-2
ii  shared-mime-info                             1.9-2

Versions of packages evince recommends:
ii  dbus-user-session [default-dbus-session-bus]  1.12.10-1
ii  dbus-x11 [dbus-session-bus]                   1.12.10-1

Versions of packages evince suggests:
ii  gvfs             1.38.0-2
ii  nautilus-sendto  3.8.6-2
ii  poppler-data     0.4.9-2
ii  unrar            1:5.5.8-1

-- no debconf information
-- 
Antonio Ospite
https://ao2.it
https://twitter.com/ao2it

A: Because it messes up the order in which people normally read text.
   See http://en.wikipedia.org/wiki/Posting_style
Q: Why is top-posting such a bad thing?