Reproduced locally:
lut 24 14:23:15 CFSR4-1 kernel: audit: type=1400 audit(1740403395.965:21250):
apparmor="DENIED" operation="exec" class="file"
profile="/usr/bin/evince//sanitized_helper"
name="/snap/snapd/23545/usr/bin/snap" pid=1147519 comm="firefox"
requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
lut 24 14:23:15 CFSR4-1 org.gnome.Evince.desktop[1147519]: panic: permission
denied
lut 24 14:23:15 CFSR4-1 org.gnome.Evince.desktop[1147519]: goroutine 1
[running]:
lut 24 14:23:15 CFSR4-1 org.gnome.Evince.desktop[1147519]:
github.com/snapcore/snapd/snapdtool.ExecInSnapdOrCoreSnap()
lut 24 14:23:15 CFSR4-1 org.gnome.Evince.desktop[1147519]:
/build/snapd-5cgGaa/snapd-2.66.1+24.04/snapdtool/tool_linux.go:222 +0x40e
lut 24 14:23:15 CFSR4-1 org.gnome.Evince.desktop[1147519]: main.main()
lut 24 14:23:15 CFSR4-1 org.gnome.Evince.desktop[1147519]:
/build/snapd-5cgGaa/snapd-2.66.1+24.04/cmd/snap/main.go:444 +0x31
I had a look at the profile and I think we can fix it but the tricky bit is
that the fix would have to be in the classic ubuntu apparmor package, not in
snapd. Snap programs are just affected by it.
** Also affects: apparmor
Importance: Undecided
Status: New
** Changed in: apparmor
Status: New => In Progress
** Changed in: apparmor
Assignee: (unassigned) => Zygmunt Krynicki (zyga)
** Changed in: snapd
Status: In Progress => Invalid
** Changed in: snapd (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2095872
Title:
evince can't start thunderbird anymore
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/2095872/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
