#1037199 evince: Cannot open links in browser due to Apparmor profile

Package:
evince
Source:
evince
Description:
Document (PostScript, PDF) viewer
Submitter:
Ralf Jung
Date:
2023-06-07 14:12:04 UTC
Severity:
normal
#1037199#5
Date:
2023-06-07 14:00:31 UTC
From:
To:
Dear Maintainer,

clicking a link to open things in my browser works in basically all applications, except evince. It took me a long whole to realize that this is due to apparmor:

Jun 07 15:53:03 r-ethtop audit[1165140]: AVC apparmor="DENIED" operation="exec" profile="/usr/bin/evince" name="/home/r/bin/firefox" pid=1165140 comm="gio-launch-desk" requested_mask="x" denied_mask="x" fsuid=1000 ouid=1000
Jun 07 15:53:03 r-ethtop kernel: audit: type=1400 audit(1686145983.857:133): apparmor="DENIED" operation="exec" profile="/usr/bin/evince" name="/home/r/bin/firefox" pid=1165140 comm="gio-launch-desk" requested_mask="x" denied_mask="x" fsuid=1000 ouid=1000

Looks like this would happen to anyone who set their default browser to something they installed themselves as a user rather than using a system package.
That's quite surprising and most people will probably never figure out why things are broken.

I am still trying to figure out how to work around this, Apparmor seems super complicated and I don't have the time to learn it just to fix clicking links in a PDF... I'll probably end up just disabling it as that seems like the only thing that's reasonably easy to do. :/

Kind regards,
Ralf