Also I'm not sure I agree with jdstrand's apparmor profile which includes:
/run/snapd.socket rw,
which I don't think we want to grant to any PDF file opened with evince?
Also I'm not sure I agree with jdstrand's apparmor profile which includes:
/run/ snapd.socket rw,
which I don't think we want to grant to any PDF file opened with evince?