Bug#923345: evince cannot start default browser due to AppArmor

[Damien Pous]

Hi,

On Sun, 22 May 2022 07:53:43 +0200 intrigeri wrote:
> This suggests it's a bug in the exo-open abstraction.
> Is this problem fixed by adding the following line to
> /etc/apparmor.d/abstractions/exo-open
> /{,usr/}bin/xfce4-mime-helper rix,
> ?
>
> If that's enough, I'm happy to submit the fix upstream.

I had this problem for quite some time, and this did fix it for me after a
[sudo service apparmor reload]. Thanks!

I'm wondering however if this fix could be dangerous?

I'm fine with following URLs in the pdf files I read with evince, but I'm
happy to know that apparmor is preventing other dangerous things ; isn't
this fix defeating's some security mechanism? (other apps, other
mime-types...)

Best,
Damien
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20221202/544765ce/attachment.htm>