Bug#923345: evince cannot start default browser due to AppArmor

[Michael Deegan]

Package: evince
Version: 3.38.2-1
Followup-For: Bug #923345

This bug still exists in bullseye, despite the partial fix in #954013.

   Oct 22 15:15:03 joyola kernel: [193012.379454] audit: type=1400 audit(1634886903.112:32): apparmor="DENIED" operation="exec" profile="/usr/bin/evince" name="/usr/bin/xfce4-mime-helper" pid=1348354 comm="exo-open" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

(Why yes, I *am* running XFCE here!)

-- System Information:
Debian Release: 11.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'oldstable-updates'), (500, 'oldstable-proposed-updates-debug'), (500, 'oldstable-debug'), (500, 'oldoldstable'), (500, 'stable'), (500, 'oldstable'), (470, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-9-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages evince depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.38.0-2
ii  evince-common                                3.38.2-1
ii  gsettings-desktop-schemas                    3.38.0-2
ii  libatk1.0-0                                  2.36.0-2
ii  libc6                                        2.31-13+deb11u2
ii  libcairo-gobject2                            1.16.0-5
ii  libcairo2                                    1.16.0-5
ii  libevdocument3-4                             3.38.2-1
ii  libevview3-3                                 3.38.2-1
ii  libgdk-pixbuf-2.0-0                          2.42.2+dfsg-1
ii  libglib2.0-0                                 2.66.8-1
ii  libgnome-desktop-3-19                        3.38.5-3
ii  libgtk-3-0                                   3.24.24-4
ii  libnautilus-extension1a                      3.38.2-1+deb11u1
ii  libpango-1.0-0                               1.46.2-3
ii  libpangocairo-1.0-0                          1.46.2-3
ii  libsecret-1-0                                0.20.4-2
ii  shared-mime-info                             2.0-1

Versions of packages evince recommends:
ii  dbus-x11 [dbus-session-bus]  1.12.20-2

Versions of packages evince suggests:
ii  gvfs             1.46.2-1
pn  nautilus-sendto  <none>
ii  poppler-data     0.4.10-1
ii  unrar            1:6.0.3-1

-- no debconf information

-MD

-- 
-----------------------------------------------------------------------------
Michael Deegan               Hugaholic              https://www.deegan.id.au/
------------------------  Jung, zr jbeel?  ----------------------------------