[ubuntu/eoan-proposed] evince 3.32.0-1ubuntu2 (Accepted)

[Jamie Strandboge]

evince (3.32.0-1ubuntu2) eoan; urgency=medium

  * debian/apparmor-profile:
    - allow 'rk' on @{HOME}/.config/enchant/* in evince
    - add additional org.gtk.vfs rules for metadata and List* DBus APIs
    - silence noisy denial for mktexpk, mktextfm, dvipdfm, dvipdfmx and mkofm
      since with the new gnome-desktop3 invocations of thumbnailers, NNP
      (no new privs) blocks transition to sanitized_helper. In addition,
      thumbnails are generated just fine without these
    - allow access to @{PROC}/@{pid}/fd/, @{PROC}/@{pid}/mountinfo and
      /sys/devices/system/cpu/ in the thumbnailer (needed by some helpers)
    - allow 'r' on @{HOME}/.texmf*/** in the thumbnailer
    - update gnome-desktop and add evince-thumbnailer /tmp file paths
    - allow read on '/' and deny write on /missfont.log which is happening now
      due to new thumbnailer invocation
  * debian/apparmor-profile.abstraction: allow directory read on
    /var/lib/texmf

Date: Tue, 18 Jun 2019 21:57:12 +0000
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/evince/3.32.0-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 18 Jun 2019 21:57:12 +0000
Source: evince
Architecture: source
Version: 3.32.0-1ubuntu2
Distribution: eoan
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Changes:
 evince (3.32.0-1ubuntu2) eoan; urgency=medium
 .
   * debian/apparmor-profile:
     - allow 'rk' on @{HOME}/.config/enchant/* in evince
     - add additional org.gtk.vfs rules for metadata and List* DBus APIs
     - silence noisy denial for mktexpk, mktextfm, dvipdfm, dvipdfmx and mkofm
       since with the new gnome-desktop3 invocations of thumbnailers, NNP
       (no new privs) blocks transition to sanitized_helper. In addition,
       thumbnails are generated just fine without these
     - allow access to @{PROC}/@{pid}/fd/, @{PROC}/@{pid}/mountinfo and
       /sys/devices/system/cpu/ in the thumbnailer (needed by some helpers)
     - allow 'r' on @{HOME}/.texmf*/** in the thumbnailer
     - update gnome-desktop and add evince-thumbnailer /tmp file paths
     - allow read on '/' and deny write on /missfont.log which is happening now
       due to new thumbnailer invocation
   * debian/apparmor-profile.abstraction: allow directory read on
     /var/lib/texmf
Checksums-Sha1:
 c32dc55860125551163dd5d147d07a5fe2cfcf9b 3143 evince_3.32.0-1ubuntu2.dsc
 92bb9f13258711aac13c9b2791ee192abd77a6ac 31284 evince_3.32.0-1ubuntu2.debian.tar.xz
 f6ed9a0cf298ada6502b6e0aa89fca5d6f963c35 20141 evince_3.32.0-1ubuntu2_source.buildinfo
Checksums-Sha256:
 fdd1241a19101071ddb8f20dca352b23dffa35307b0ea61ceaf804121683fb17 3143 evince_3.32.0-1ubuntu2.dsc
 a25f38dcf8d2d68f77a0a2bc09d5c5ab1d9f2909b384002256135f78a6375831 31284 evince_3.32.0-1ubuntu2.debian.tar.xz
 0e9145c37261bc4634ef563ebfbd7dbf549f29077c0f4f6fbbe164a3cccd3cce 20141 evince_3.32.0-1ubuntu2_source.buildinfo
Files:
 c14279b74c5678a5b273e20bb1546b88 3143 gnome optional evince_3.32.0-1ubuntu2.dsc
 7d9ce846686919c5ff75580ecb57c8eb 31284 gnome optional evince_3.32.0-1ubuntu2.debian.tar.xz
 169ef59a5709d07bb7dfbcb74abd55e4 20141 gnome optional evince_3.32.0-1ubuntu2_source.buildinfo
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=rnW9
-----END PGP SIGNATURE-----