"At the moment only I can write to /windows: will your suggested workaround allow any user of evince to do it?" -- Normal discretionary access controls are still in effect. By adding the rule I mentioned to your profile, users will have read and write access to /windows if normal unix permissions allow it.
As for why /windows is there at all, I don't know. I do see in https://help.ubuntu.com/community/Fstab that the recommended place to mount your windows partition is /media/windows. If an Ubuntu application is creating and using directories outside of the Filesystem Hierarchy Standard (FHS), then that is a separate bug in that application. The evince AppArmor profile should support mountable media via FHS, and I will fix that.
David,
"At the moment only I can write to /windows: will your suggested workaround allow any user of evince to do it?" -- Normal discretionary access controls are still in effect. By adding the rule I mentioned to your profile, users will have read and write access to /windows if normal unix permissions allow it.
As for why /windows is there at all, I don't know. I do see in https:/ /help.ubuntu. com/community/ Fstab that the recommended place to mount your windows partition is /media/windows. If an Ubuntu application is creating and using directories outside of the Filesystem Hierarchy Standard (FHS), then that is a separate bug in that application. The evince AppArmor profile should support mountable media via FHS, and I will fix that.