Bug#955017: evince: Apparmor profile breaks print preview

[Jeffrey Ratcliffe]

Package: evince
Version: 3.36.0-1
Severity: normal

The apparmor profile installed by evince breaks the print preview
functionality (in all gtk3 applications):

Mar 26 21:09:23 xxxxx kernel: [ 2754.171426] audit: type=1400
audit(1585253363.723:33): apparmor="DENIED" operation="exec"
profile="/usr/bin/evince" name="/usr/bin/dash" pid=9096 comm="evince"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0



-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-4-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages evince depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.36.0-1
ii  evince-common                                3.36.0-1
ii  gsettings-desktop-schemas                    3.36.0-1
ii  libatk1.0-0                                  2.34.1-1
ii  libc6                                        2.30-2
ii  libcairo-gobject2                            1.16.0-4
ii  libcairo2                                    1.16.0-4
ii  libevdocument3-4                             3.36.0-1
ii  libevview3-3                                 3.36.0-1
ii  libgdk-pixbuf2.0-0                           2.40.0+dfsg-3
ii  libglib2.0-0                                 2.64.1-1
ii  libgnome-desktop-3-18                        3.34.2-2
ii  libgtk-3-0                                   3.24.14-1
ii  libnautilus-extension1a                      3.34.1-1
ii  libpango-1.0-0                               1.42.4-8
ii  libpangocairo-1.0-0                          1.42.4-8
ii  libsecret-1-0                                0.20.2-1
ii  shared-mime-info                             1.10-1

Versions of packages evince recommends:
ii  dbus-user-session [default-dbus-session-bus]  1.12.16-2

Versions of packages evince suggests:
ii  gvfs             1.44.0-1
pn  nautilus-sendto  <none>
ii  poppler-data     0.4.9-2
pn  unrar            <none>

-- no debconf information