Ubuntu
cups package

apparmor rejections from cups|cups-pdf

Bug #276502 reported by Steve Beattie on 2008-09-30

This bug report is a duplicate of: Bug #151190: AppArmor does not support non-standard home directory locations - automatic discovery of home directories. Edit Remove

Affects		Status	Importance	Assigned to	Milestone
	cups (Ubuntu)	New	Undecided	Unassigned

Bug Description

Binary package hint: cups

I got the first rejection while poking at the cups management interface:

[18355.389868] type=1503 audit(1222813703.699:5): operation="file_lock" requested_mask="wk::" denied_mask="k::" fsuid=7 name="/var/cache/cups/help.index" pid=11329 profile="/usr/sbin/cupsd"

The second was generated by trying to print to the pdf printer, which failed:

[18496.740931] type=1503 audit(1222813845.047:6): operation="capable" name="dac_override" pid=11480 profile="/usr/lib/cups/backend/cups-pdf"

Presumably, this is needed to either create the ${HOME}/PDF/ directory or the generated pdf file underneath it and have it be owned by the user who printed the document. Add "capability dac_override" to the cups-pdf profile allowed it to print.

steve@intrepid-a6desktop:~$ apt-cache policy cups
cups:
  Installed: 1.3.8-11ubuntu2
  Candidate: 1.3.8-11ubuntu2
  Version table:
*** 1.3.8-11ubuntu2 0
        500 http://us.archive.ubuntu.com intrepid/main Packages
        100 /var/lib/dpkg/status

Revision history for this message

Saivann Carignan (oxmosys) wrote on 2008-10-03:

Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 270046, so it is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Feel free to continue to report any other bugs you may find.