Can't start evince over SSH tunnel X session

Bug #904001 reported by Ben Gamari
30
This bug affects 7 people
Affects Status Importance Assigned to Milestone
evince (Ubuntu)
Confirmed
Undecided
Ubuntu Security Team

Bug Description

For example,

        $ cat /etc/issue
        Ubuntu 11.10 \n \l

        $ ssh -X chimera
        Welcome to Ubuntu 11.10 (GNU/Linux 3.0.0-13-generic x86_64)

         * Documentation: https://help.ubuntu.com/

        35 packages can be updated.
        8 updates are security updates.

        Last login: Tue Dec 13 18:06:12 2011 from physicsnat56.physics.umass.edu
        $ evince ~/hello.pdf
        Failed to get bus connection: Command line `dbus-launch --autolaunch=4ecb6d54129c67693bce6dc900000006 --binary-syntax --close-stderr' exited with non-zero exit status 1: EOF in dbus-launch reading address from bus daemon\n

In /var/log/syslog on chimera I see messages of the following form,

        Dec 13 18:17:35 chimera kernel: [1115999.980510] type=1400 audit(1323818255.844:124): apparmor="DENIED" operation="exec" parent=29637 profile="/usr/bin/evince" name="/bin/dbus-daemon" pid=29638 comm="dbus-launch" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

Therefore, it seems this is likely related to bug #566207.

Changed in evince (Ubuntu):
assignee: nobody → Ubuntu Security Team (ubuntu-security)
Revision history for this message
JfBucas (jfbucas) wrote :

This fix works for me:
# cd /etc/apparmor.d/abstractions
# diff evince evince-orig
51d50
< /bin/dbus-daemon Uxr,

# apparmor_parser -r -W -T /etc/apparmor.d/usr.bin.evince

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in evince (Ubuntu):
status: New → Confirmed
Revision history for this message
Ketil Malde (ketil-ii) wrote :

Thanks, JFBucas, adding this line fixed it for me!

Revision history for this message
Brandon Heller (brandon-heller) wrote :

Thanks JfBucas, works for me, thanks!

Revision history for this message
steve cohen (steve-si9yrl01qsu4bt4tonx56g) wrote :

ubuntu-gnome 13.04 has the same issue and is solved by adding the /bin/dbus-daemon Uxr, to usr.bin.evince stanza

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.