[Bug 1915910] Re: evince does not print (apparmor, pxgsettings)

[Andreas Hasenack]

Hi all,

I'm reviewing this SRU, and was trying to reproduce the issue following
the given test case, but no matter what I try, it just works.

I installed cinnamon 22.10 from the ISO image into a VM, and added a
remote network printer (not wifi, though: wired ethernet). I monitored
dmesg, and launched evince from a terminal so I could spot errors there,
but it printed to that remote printer just fine, directly to it.

I also tested installing ubuntu jammy 22.04, then the cinnamon desktop,
and it also printed find, but there was some problem with the driver and
the printed page just said "Unsupported Personality: UNKNOWN".

In any case, it feels like we need to narrow this case down a bit
further. I therefore ask all who are affected, what else could it be
that is triggering the apparmor error on your end? What would make
pxgsettings be called by evince? Something in particular to the PDF file
that is being printed? Perhaps an image? Or a font?

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1915910

Title:
  evince does not print (apparmor, pxgsettings)

Status in evince package in Ubuntu:
  Fix Committed
Status in libproxy package in Ubuntu:
  Invalid
Status in evince package in Debian:
  New

Bug description:
  * Impact

  Evince hangs when opening the printing dialog for some users with a
  remote printer configured and connected

  * Test case

  - configure a remote printer and turn it on
  - open a pdf
  - try to print the document

  the print dialog shouldn't freeze the viewer

  * What could go wrong

  The change is only allowing access to one extra system binary from the
  apparmor profile so shouldn't really have an impact on the software
  behaviour. If the syntax or content of the change was incorrect it
  could make the apparmor profile not been loaded anymore or block
  access to thing that should be allowed, so ensure that opening
  documents, printing and thumbnailing are still working

  ----------------------------------------------------------------------

  
  audit: type=1400 audit(1613557537.646:81): apparmor="DENIED" operation="exec" profile="/usr/bin/evince" name="/usr/lib/x86_64-linux-gnu/libproxy/0.4.17/pxgsettings" pid=3500 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

  It seems that evince has no rights to print if I understand this
  correctly

  Printing the same pdf-file from the same origin/folder works with
  OCULAR

  The error is reproduceable

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1915910/+subscriptions