/var/log/messages with sudo aa-complain cupsd
Oct 12 10:32:03 merkur kernel: [ 7942.556000] audit(1192177922.828:17): type=1502 operation="capable" name="dac_override" pid=6971 profile="/usr/lib/cups/backend/cups-pdf" Oct 12 10:32:03 merkur kernel: [ 7942.628000] audit(1192177922.828:18): type=1502 operation="inode_create" requested_mask="w" denied_mask="w" name="/myhome/kofler/PDF/Welcome_to_LWN_net__LWN_net_.pdf" pid=6974 profile="/usr/lib/cups/backend/cups-pdf" Oct 12 10:32:03 merkur kernel: [ 7942.884000] audit(1192177923.328:19): type=1502 operation="setattr" requested_mask="w" denied_mask="w" attribute="mode,ctime," name="/myhome/kofler/PDF/Welcome_to_LWN_net__LWN_net_.pdf" pid=6972 profile="/usr/lib/cups/backend/cups-pdf"
@hunger:
if I change @HOMEDIRS in /etc/apparmor.d/tunables/home like this:
@{HOMEDIRS}=/home/ /myhome/
PDF generation works fine; no negative side-effects so far
thanks for the hint!
/var/log/messages with sudo aa-complain cupsd
Oct 12 10:32:03 merkur kernel: [ 7942.556000] audit(119217792 2.828:17) : type=1502 operation="capable" name="dac_override" pid=6971 profile= "/usr/lib/ cups/backend/ cups-pdf" 2.828:18) : type=1502 operation= "inode_ create" requested_mask="w" denied_mask="w" name="/ myhome/ kofler/ PDF/Welcome_ to_LWN_ net__LWN_ net_.pdf" pid=6974 profile= "/usr/lib/ cups/backend/ cups-pdf" 3.328:19) : type=1502 operation="setattr" requested_mask="w" denied_mask="w" attribute= "mode,ctime, " name="/ myhome/ kofler/ PDF/Welcome_ to_LWN_ net__LWN_ net_.pdf" pid=6972 profile= "/usr/lib/ cups/backend/ cups-pdf"
Oct 12 10:32:03 merkur kernel: [ 7942.628000] audit(119217792
Oct 12 10:32:03 merkur kernel: [ 7942.884000] audit(119217792
@hunger:
if I change @HOMEDIRS in /etc/apparmor. d/tunables/ home like this:
@{HOMEDIRS}=/home/ /myhome/
PDF generation works fine; no negative side-effects so far
thanks for the hint!