Debian 11: evince and apparmor flood kernel log

From	Roger Price <debian@rogerprice.org>
Newsgroups	linux.debian.user
Subject	Debian 11: evince and apparmor flood kernel log
Date	2021-09-17 23:00 +0200
Message-ID	<CYt7H-10Z-3@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

In Debian 11, evince has an appamor profile which floods the kernel log with 
hundreds of messages of the style:

  [24216.325764] audit: type=1400 audit(1631892398.580:255): apparmor="DENIED"
   operation="open" profile="/usr/bin/evince"
   name="/mnt/home/rprice/.local/share/gvfs-metadata/home" pid=2229
   comm="pool-evince" requested_mask="r" denied_mask="r" fsuid=2108 ouid=2108

and floods the console with messages such as

  (evince:2869): GVFS-WARNING **: 22:18:18.510: can't init metadata tree /mnt/home/rprice/.local/share/gvfs-metadata/home: open: Permission denied
  ** (evince:2869): WARNING **: 22:18:18.510: Error setting file metadata: can’t open metadata tree

Command ls -l /mnt/home/rprice/.local/share/gvfs-metadata/home reports

  -rw------- 1 rprice cs-users 800 Aug 18 10:48 /mnt/home/rprice/.local/share/gvfs-metadata/home

Quoting file /etc/apparmor.d/usr.bin.evince:

  # evince is not written with application confinement in mind and is designed to
  # operate within a trusted desktop session where anything running within the
  # user's session is trusted.

I solved the problem by switching to mupdf, but mupdf is not as complete as 
evince.

Is there some way of calming evince+appamor?

Roger

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Debian 11: evince and apparmor flood kernel log Roger Price <debian@rogerprice.org> - 2021-09-17 23:00 +0200
  Re: Debian 11: evince and apparmor flood kernel log Reco <recoverym4n@enotuniq.net> - 2021-09-17 23:20 +0200
  Re: Debian 11: evince and apparmor flood kernel log Klaus Singvogel <deb-user-ml@singvogel.net> - 2021-09-18 01:10 +0200
    Re: Debian 11: evince and apparmor flood kernel log Roger Price <debian@rogerprice.org> - 2021-09-18 13:00 +0200
      Re: Debian 11: evince and apparmor flood kernel log Greg Wooledge <greg@wooledge.org> - 2021-09-18 14:50 +0200
        Re: Debian 11: evince and apparmor flood kernel log David Wright <deblis@lionunicorn.co.uk> - 2021-09-19 07:00 +0200

csiph-web