Hi,

A couple of weeks or maybe months ago I noticed Evince started freezing
when I’m trying to print anything. Upon checking the journal, I found
this:

Dec 28 11:04:07 nuevo audit[3361741]: AVC apparmor="DENIED" operation="exec" profile="/usr/bin/evince" 
name="/usr/lib/x86_64-linux-gnu/libproxy/0.4.17/pxgsettings" pid=3361741 comm="sh" requested_mask="x" 
denied_mask="x" fsuid=1000 ouid=0

Indeed, by switching evince to complain mode, I was able to proceed;
many more messages about attempted (and allowed) attempts to access this
file appeared in the logs.

I’ve submitted a merge request fixing the issue.

https://salsa.debian.org/gnome-team/evince/-/merge_requests/5

--
Cheers,
  Andrej
From a54f075aa23b51b0ec904a0aecc3402bf2b3c106 Mon Sep 17 00:00:00 2001
From: Andrej Shadura <andrew.shad...@collabora.co.uk>
Date: Wed, 31 Aug 2022 13:02:10 +0200
Subject: Print dialog requires access to libproxy’s pxgsettings

Closes: #1002725
---
 debian/apparmor-profile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/apparmor-profile b/debian/apparmor-profile
index 95c28421cab9..904f0ead7e3c 100644
--- a/debian/apparmor-profile
+++ b/debian/apparmor-profile
@@ -68,6 +68,9 @@
   /usr/bin/krusader Cx -> sanitized_helper, # KDE
   /usr/bin/thunar Cx -> sanitized_helper,   # XFCE
 
+  # Print Dialog
+  /usr/lib/@{multiarch}/libproxy/*/pxgsettings Cx -> sanitized_helper,
+
   # For Xubuntu to launch the browser
   #include <abstractions/exo-open>
 
-- 
2.35.1

Reply via email to