== SRU ==
1. after upgrading to 2.30.3-0ubuntu1 from lucid release, cbz files are broken 
because evince changed the way it opens the files and apparmor is blocking 
access to the zipnote binary. Also, cbt files are blocked by the apparmor 
profile (needs access to tar) and people using p7zip-full without p7zip 
installed cannot open cb7 files.

2. the bug has been addressed in the development release (2.30.3-0ubuntu3) by 
adjusting the apparmor profile to have:
  /usr/bin/7za ixr,
  /usr/lib/p7zip/7za ixr,
  /usr/bin/zipnote ixr,
  /bin/tar ixr,

3. patch is attached

4. TEST CASE:
- try to open the attached cbz file
- try to open a cb7 file with p7zip-full installed and p7zip uninstalled
- try to open a cbt file

Example comicbook files can be found in the data directory of the qa-
regression-testing bzr branch (data/*.cb*).

5. The regression potential is considered very low since the profile
simply adds access to the binaries required to open the files. The
profile uses 'i' for 'inherit', so these binaries cannot be used to
bypass existing apparmor protections.

** Patch added: "evince_2.30.3-0ubuntu1.1.debdiff"
   http://launchpadlibrarian.net/51472094/evince_2.30.3-0ubuntu1.1.debdiff

-- 
evince cbz support is broken on evince-2.30.3-0ubuntu1
https://bugs.launchpad.net/bugs/599169
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to