Since Evince ships with an Apparmor profile on its own, I think the following fix makes sense:
$ diff -Naur abstractions/ubuntu-browsers.d/productivity{.orig,} --- abstractions/ubuntu-browsers.d/productivity.orig 2017-10-26 15:34:03.374102924 -0400 +++ abstractions/ubuntu-browsers.d/productivity 2017-10-26 15:33:55.398235488 -0400 @@ -20,7 +20,7 @@ /usr/lib/libreoffice/program/soffice Cxr -> sanitized_helper,
# PDFs - /usr/bin/evince Cxr -> sanitized_helper, + /usr/bin/evince Px, /usr/bin/okular Cxr -> sanitized_helper,
owner @{HOME}/.adobe/** rw,
Since Evince ships with an Apparmor profile on its own, I think the following fix makes sense:
$ diff -Naur abstractions/ ubuntu- browsers. d/productivity{ .orig,} ubuntu- browsers. d/productivity. orig 2017-10-26 15:34:03.374102924 -0400 ubuntu- browsers. d/productivity 2017-10-26 15:33:55.398235488 -0400 lib/libreoffice /program/ soffice Cxr -> sanitized_helper,
--- abstractions/
+++ abstractions/
@@ -20,7 +20,7 @@
/usr/
# PDFs
- /usr/bin/evince Cxr -> sanitized_helper,
+ /usr/bin/evince Px,
/usr/bin/okular Cxr -> sanitized_helper,
owner @{HOME}/.adobe/** rw,