Bug#921532: evince: can't open a pdf from firefox (apparmor error)

[Simon McVittie]

On Wed, 06 Feb 2019 at 16:20:32 +0100, Julien Cristau wrote:
> trying to open a pdf file from my local firefox installs fails, with a
> message like the below in the kernel log:
> 
> [239440.060481] audit: type=1400 audit(1549462128.942:91): apparmor="DENIED" operation="file_mmap" profile="/usr/bin/evince" name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992 comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
> [239440.062127] audit: type=1400 audit(1549462128.942:92): apparmor="DENIED" operation="file_mmap" profile="/usr/bin/evince" name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992 comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000

I assume your local Firefox build sets a LD_LIBRARY_PATH on itself and its
child processes?

If so, I'm not sure there's much that evince can do about that.

(If desktop file-handling was delegated to a D-Bus API, a bit like the way
flatpak-xdg-utils' xdg-open reimplementation works, then that would solve this
sort of thing forever... but that doesn't currently exist.)

    smcv