Bug#921532: evince: can't open a pdf from firefox (apparmor error)

[Julien Cristau]

On 2/6/19 4:54 PM, Simon McVittie wrote:
> On Wed, 06 Feb 2019 at 16:20:32 +0100, Julien Cristau wrote:
>> trying to open a pdf file from my local firefox installs fails, with a
>> message like the below in the kernel log:
>>
>> [239440.060481] audit: type=1400 audit(1549462128.942:91): apparmor="DENIED" operation="file_mmap" profile="/usr/bin/evince" name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992 comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
>> [239440.062127] audit: type=1400 audit(1549462128.942:92): apparmor="DENIED" operation="file_mmap" profile="/usr/bin/evince" name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992 comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000
> 
> I assume your local Firefox build sets a LD_LIBRARY_PATH on itself and its
> child processes?
> 
Looks like it does.  *sigh*

I wonder if we could fix it there to undo its env changes before
exec()ing external apps.

Cheers,
Julien