Ubuntu
evince package

  1. Bug #599169
  2. Comment #23

Comment 23 for bug 599169

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

== SRU ==
1. after upgrading to 2.30.3-0ubuntu1 from lucid release, cbz files are broken because evince changed the way it opens the files and apparmor is blocking access to the zipnote binary. Also, cbt files are blocked by the apparmor profile (needs access to tar) and people using p7zip-full without p7zip installed cannot open cb7 files.

2. the bug has been addressed in the development release (2.30.3-0ubuntu3) by adjusting the apparmor profile to have:
  /usr/bin/7za ixr,
  /usr/lib/p7zip/7za ixr,
  /usr/bin/zipnote ixr,
  /bin/tar ixr,

3. patch is attached

4. TEST CASE:
- try to open the attached cbz file
- try to open a cb7 file with p7zip-full installed and p7zip uninstalled
- try to open a cbt file

Example comicbook files can be found in the data directory of the qa-regression-testing bzr branch (data/*.cb*).

5. The regression potential is considered very low since the profile simply adds access to the binaries required to open the files. The profile uses 'i' for 'inherit', so these binaries cannot be used to bypass existing apparmor protections.