There is now an <abstractions/wayland>, which is #include'd by
<abstractions/gnome>. It includes weston-shared, but not the Wayland
socket itself.
I suspect a better rule for that would be:
owner /run/user/*/wayland-[0-9]* rw,
so that the numbered sockets that are conventionally used are matched
more precisely.
The complete set of possible fd-passed shared-memory backing files is
more like:
owner /run/user/*/{mesa,mutter,sdl,weston,xwayland}-shared-* rw,
because the Wayland code to create an anonymous backing file for shared
memory has been copied and pasted all over the place, with some
instances changing the name.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents opening docs from other apps under
Wayland
Status in AppArmor:
New
Status in apparmor package in Ubuntu:
New
Bug description:
Evince fails to run when launched from another app (Nautilus, Ephy,
etc) and running under Wayland. For example, nothing appears to happen
when double-clicking on a PDF file in Nautilus. Evince is launched,
but its Apparmour profile is preventing access to a Wayland socket,
hence it immediately exits.
The following is typical of the reported error:
> Oct 19 15:06:40 payens kernel: audit: type=1400
audit(1445227600.333:26): apparmor="DENIED" operation="connect"
profile="/usr/bin/evince" name="/run/user/1000/wayland-0" pid=12956
comm="evince" requested_mask="wr" denied_mask="wr" fsuid=1000
ouid=1000
Adding the following lines to it's local Apparmour config and
reloading Apparmour fixes the problem:
> owner /run/user/*/wayland-* rw,
> owner /run/user/*/weston-shared-* rw,
ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: evince 3.16.1-0ubuntu1
ProcVersionSignature: Ubuntu 4.2.0-16.19-generic 4.2.3
Uname: Linux 4.2.0-16-generic x86_64
ApportVersion: 2.19.1-0ubuntu2
Architecture: amd64
CurrentDesktop: GNOME
Date: Mon Oct 19 17:49:19 2015
InstallationDate: Installed on 2015-07-22 (89 days ago)
InstallationMedia: Ubuntu-GNOME 15.04 "Vivid Vervet" - Release amd64
(20150422)
SourcePackage: evince
UpgradeStatus: Upgraded to wily on 2015-08-27 (52 days ago)
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1507469/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
