Bug#1071608: apparmor prevents storage of preferences

[Harald Welte]

Package: evince
Version: 46.1-1
Severity: normal

At some point evince on my system stopped to use the document-specific preference that I have stored over the
past few years (such as inverted display for many PDFs).  Instead, every PDF is opened without that
preference.

I have the suspicion that it's apparmor related, as I get lots of errors every time I start evince:

(evince:185861): Gtk-WARNING **: 11:42:12.750: Failed to parse /space/home/laforge/.config/gtk-3.0/settings.ini: Permission denied

(evince:185861): Gtk-WARNING **: 11:42:12.795: Attempting to read the recently used resources file at '/space/home/laforge/.local/share/recently-used.xbel', but the parser failed: Failed to open file “/space/home/laforge/.local/share/recently-used.xbel”: Permission denied.

(evince:185861): GVFS-WARNING **: 11:42:12.847: can't init metadata tree /space/home/laforge/.local/share/gvfs-metadata/home: open: Permission denied
[many repeated messages]
** (evince:185861): WARNING **: 11:42:12.884: Error setting file metadata: can’t open metadata tree
[many repeated messages]
(evince:185861): Gtk-WARNING **: 11:42:13.162: Attempting to store changes into '/space/home/laforge/.local/share/recently-used.xbel', but failed: Failed to create file “/space/home/laforge/.local/share/recently-used.xbel.KJX8N2”: Permission denied
(evince:185861): Gtk-WARNING **: 11:42:13.162: Attempting to set the permissions of '/space/home/laforge/.local/share/recently-used.xbel', but failed: Permission denied


I guess I can work around this with custom apparmor rules, but shouldn't the default be continue working as normal, and not loose important features by the default apparmor rules?



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.7.12-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages evince depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.40.0-4+b2
ii  evince-common                                46.1-1
ii  gsettings-desktop-schemas                    46.0-1
ii  libatk1.0-0t64                               2.52.0-1
ii  libc6                                        2.38-11
ii  libcairo-gobject2                            1.18.0-3+b1
ii  libcairo2                                    1.18.0-3+b1
ii  libevdocument3-4t64                          46.1-1
ii  libevview3-3t64                              46.1-1
ii  libgdk-pixbuf-2.0-0                          2.42.12+dfsg-1
ii  libglib2.0-0t64                              2.80.2-1
ii  libgnome-desktop-3-20t64                     44.0-5
ii  libgtk-3-0t64                                3.24.41-4
ii  libhandy-1-0                                 1.8.3-1+b1
ii  libpango-1.0-0                               1.52.2+ds-1
ii  libpangocairo-1.0-0                          1.52.2+ds-1
ii  libsecret-1-0                                0.21.4-1+b1
ii  shared-mime-info                             2.4-4

Versions of packages evince recommends:
ii  dbus-user-session [default-dbus-session-bus]  1.14.10-4+b1
ii  dbus-x11 [dbus-session-bus]                   1.14.10-4+b1

Versions of packages evince suggests:
ii  gvfs             1.54.0-4
pn  nautilus-sendto  <none>
ii  poppler-data     0.4.12-1
ii  unrar            1:7.0.9-1

-- Configuration Files:
/etc/apparmor.d/usr.bin.evince changed [not included]

-- no debconf information