[ubuntu/cosmic-proposed] evince 3.30.0-3ubuntu1 (Accepted)

[Jamie Strandboge]

evince (3.30.0-3ubuntu1) cosmic; urgency=medium

  * debian/apparmor-profile.abstraction, apparmor-profile: harden the profile
    - add preamble for expectations of the profile
    - evince{-previewer}: restrict access to DBus system bus (for compatiblity,
      we allow full access to session, translation and accessibility buses):
      + allow Get* to anything polkit allows
      + allow talking to avahi (for printing)
      + allow talking to colord (for printing)
    - make the thumbnailer more restrictive (LP: #1794848)
      + remove evince abstraction and use only what is needed from it
      + limit access to DBus session bus
      + generally disallow writes
      + allow reads for non-hidden files
    - disallow access to the dirs of private files (LP: #1794848)
  * debian/apparmor-profile: allow /bin/env ixr

Date: Fri, 28 Sep 2018 21:19:49 +0000
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/evince/3.30.0-3ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 28 Sep 2018 21:19:49 +0000
Source: evince
Binary: evince evince-common libevdocument3-4 libevview3-3 libevince-dev gir1.2-evince-3.0
Architecture: source
Version: 3.30.0-3ubuntu1
Distribution: cosmic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
 evince     - Document (PostScript, PDF) viewer
 evince-common - Document (PostScript, PDF) viewer - common files
 gir1.2-evince-3.0 - GObject introspection data for the evince libraries
 libevdocument3-4 - Document (PostScript, PDF) rendering library
 libevince-dev - Document (PostScript, PDF) rendering library - development files
 libevview3-3 - Document (PostScript, PDF) rendering library - Gtk+ widgets
Launchpad-Bugs-Fixed: 1794848
Changes:
 evince (3.30.0-3ubuntu1) cosmic; urgency=medium
 .
   * debian/apparmor-profile.abstraction, apparmor-profile: harden the profile
     - add preamble for expectations of the profile
     - evince{-previewer}: restrict access to DBus system bus (for compatiblity,
       we allow full access to session, translation and accessibility buses):
       + allow Get* to anything polkit allows
       + allow talking to avahi (for printing)
       + allow talking to colord (for printing)
     - make the thumbnailer more restrictive (LP: #1794848)
       + remove evince abstraction and use only what is needed from it
       + limit access to DBus session bus
       + generally disallow writes
       + allow reads for non-hidden files
     - disallow access to the dirs of private files (LP: #1794848)
   * debian/apparmor-profile: allow /bin/env ixr
Checksums-Sha1:
 70c55a9d7f874184f05f5a5b5faf3f07ea3fe9a8 3176 evince_3.30.0-3ubuntu1.dsc
 7668eb47508fa3e67c123a9b2b01164eb50e98e8 29604 evince_3.30.0-3ubuntu1.debian.tar.xz
 baf0f068ce7cb2137838dd86c738596638edc2cf 19685 evince_3.30.0-3ubuntu1_source.buildinfo
Checksums-Sha256:
 2ce46028848940287cae3632195b688e8ab4121660a54971d65abfbc8adbae6b 3176 evince_3.30.0-3ubuntu1.dsc
 6af8682ee80dd3dc2a9cc8578c34a8acdd389e634d0ea958af684486eef79415 29604 evince_3.30.0-3ubuntu1.debian.tar.xz
 09a68672d90a356dc24d12c3db437ab9d734c6809e40cd3216088a9f5b46cfff 19685 evince_3.30.0-3ubuntu1_source.buildinfo
Files:
 643da29f43a0513f1a2af69c886a6328 3176 gnome optional evince_3.30.0-3ubuntu1.dsc
 fd78a0e8067388d1c1febcf2eff8b5a6 29604 gnome optional evince_3.30.0-3ubuntu1.debian.tar.xz
 fca2162420585ffe86c85498a84f6cbe 19685 gnome optional evince_3.30.0-3ubuntu1_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>