** Description changed:
- 1) Set Google Chrome as a default web browser
- 2) Evince: Open a PDF file containing an URL (HTTP)
- 3) Evince: Click on the link
+ SRU Justification:
- Expected result:
- URL is opened in Google Chrome
+ Impact: when chromium-browser or Google Chrome are set as the default
+ browser, the user is unable to open links via PDF files
- Actual result:
- URL isn't opened in Google Chrome:
+ Development fix: the fix will be applied to Quantal via pocket copy of
+ this SRU.
- /opt/google/chrome/google-chrome: line 42: /opt/google/chrome/chrome:
Permission denied
- /opt/google/chrome/google-chrome: line 42: /opt/google/chrome/chrome: Success
+ Stable fix: this was fixed in r2039 by adding the following to
/etc/apparmor.d/abstractions/ubuntu-helpers:
+ # While the chromium and chrome sandboxes are setuid root, they only link
+ # in limited libraries so glibc's secure execution should be enough to not
+ # require the santized_helper (ie, LD_PRELOAD will only use standard system
+ # paths (man ld.so)).
+ /usr/lib/chromium-browser/chromium-browser-sandbox PUxr,
+ /opt/google/chrome/chrome-sandbox PUxr,
+ /opt/google/chrome/google-chrome Pixr,
+ /opt/google/chrome/chrome Pixr,
+ /opt/google/chrome/lib*.so{,.*} m,
- syslog:
- Mar 25 13:26:44 turion kernel: [ 675.919249] type=1400
audit(1332674804.672:24): apparmor="DENIED" operation="exec" parent=1
profile="/usr/bin/evince//sanitized_helper" name="/opt/google/chrome/chrome"
pid=3820 comm="google-chrome" requested_mask="x" denied_mask="x" fsuid=1000
ouid=0
+ TEST CASE:
+ 1. Install chromium-browser and/or Google Chrome
- Workaround: Add "/opt/google/chrome/google-chrome Ux," into
- /etc/apparmor.d/abstractions/ubuntu-browsers and restart apparmor
- service
+ 2. Launch chromium-browser (or Chrome) and set it as the default web
+ browser
- Used SW:
- Ubuntu 12.04 LTS (beta 1)
- kernel 3.2.0-20-generic x86_64
- Google Chrome 17.0.963.83
- evince 3.3.92-0ubuntu2
- apparmor 2.7.102-0ubuntu1
+ 3. Open a PDF with a link in it (attached) in evince and click on the
+ link.
- ProblemType: Bug
- DistroRelease: Ubuntu 12.04
- Package: apparmor 2.7.102-0ubuntu1
- ProcVersionSignature: Ubuntu 3.2.0-20.32-generic 3.2.12
- Uname: Linux 3.2.0-20-generic x86_64
- ApportVersion: 1.95-0ubuntu1
- Architecture: amd64
- Date: Sun Mar 25 14:11:23 2012
- InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64+mac
(20111011)
- ProcKernelCmdline: BOOT_IMAGE=/vmlinuz-3.2.0-20-generic
root=/dev/mapper/Data-Root ro splash quiet vt.handoff=7
- SourcePackage: apparmor
- UpgradeStatus: Upgraded to precise on 2012-03-03 (21 days ago)
+ At this point, chromium-browser (or Chrome) should open to the link
+ specified. Without the patch, it does not open and there are AppArmor
+ denials in /var/log/kern.log.
+
+ Regression potential: the regression potential is considered low.
+ Launching chromium-browser and Chrome via evince is currently broken, so
+ there is no regression potential there, however ubuntu-helpers is
+ included by the (disable by default) firefox profile so a mistake in the
+ added policy could prevent firefox policy from loading.
** Also affects: apparmor (Ubuntu Precise)
Importance: Undecided
Status: New
** Also affects: apparmor (Ubuntu Quantal)
Importance: Low
Status: Triaged
** Changed in: apparmor (Ubuntu Precise)
Status: New => Triaged
** Changed in: apparmor (Ubuntu Precise)
Importance: Undecided => Low
** Summary changed:
- Evince cannot open HTTP link in Google Chrome
+ Evince cannot open HTTP link in Google Chrome or chromium-browser
** Changed in: apparmor (Ubuntu Precise)
Milestone: None => precise-updates
** Attachment added: "test_hyperlink.pdf"
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/964510/+attachment/3125040/+files/test_hyperlink.pdf
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/964510
Title:
Evince cannot open HTTP link in Google Chrome or chromium-browser
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/964510/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
