Your message dated Fri, 21 May 2021 14:21:16 +0000
with message-id <E1lk61c-000G6D-Dh@fasolo.debian.org>
and subject line Bug#988764: fixed in cups-filters 1.28.8-3
has caused the Debian Bug report #988764,
regarding cups-browsed: apparmor blocks access to /usr/share/{cups/,}/locale
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
988764: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988764
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: cups-browsed: apparmor blocks access to /usr/share/{cups/,}/locale
- From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
- Date: Wed, 19 May 2021 10:33:10 +0000
- Message-id: <[🔎] 20210519103310.Horde.RKLHa27Nnd_qs5bNBhJjY2M@mail.das-netzwerkteam.de>
Package: cups-browsed Version: 1.28.7-1 Severity: normal Tags: patch With CUPS on buster and bullseye I see these messages in /var/log/syslog:May 19 12:26:12 server03 kernel: [4563725.605605] audit: type=1400 audit(1621419972.056:193): apparmor="DENIED" operation="open" profile="/usr/sbin/cups-browsed" name="/usr/share/cups/locale/" pid=17771 comm="cups-browsed" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 May 19 12:26:12 server03 kernel: [4563725.606138] audit: type=1400 audit(1621419972.056:194): apparmor="DENIED" operation="open" profile="/usr/sbin/cups-browsed" name="/usr/share/locale/" pid=17771 comm="cups-browsed" requested_mask="r" denied_mask="r" fsuid=0 ouid=0May 19 12:27:08 server03 systemd[1]: cups-browsed.service: Succeeded.These error messages / folder access blocks can be amended by this change in /etc/apparmor.d/usr.sbin.cups-browsed:```diff --git a/apparmor.d/usr.sbin.cups-browsed b/apparmor.d/usr.sbin.cups-browsedindex 4cf9301..cb78f2d 100644 --- a/apparmor.d/usr.sbin.cups-browsed +++ b/apparmor.d/usr.sbin.cups-browsed @@ -10,6 +10,8 @@ /etc/cups/cups-browsed.conf r, /etc/cups/lpoptions r, /etc/cups/ppd/* r, + /usr/share/cups/locale/ r, + /usr/share/locale/ r, /{var/,}run/cups/certs/* r, /var/cache/cups/* rw, /var/log/cups/* rw, ``` Greets, Mike -- DAS-NETZWERKTEAM c\o Technik- und Ökologiezentrum Eckernförde Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde mobile: +49 (1520) 1976 148 landline: +49 (4351) 850 8940 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.deAttachment: pgpQ8m8wpvJZn.pgp
Description: Digitale PGP-Signatur
--- End Message ---
--- Begin Message ---
- To: 988764-close@bugs.debian.org
- Subject: Bug#988764: fixed in cups-filters 1.28.8-3
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Fri, 21 May 2021 14:21:16 +0000
- Message-id: <E1lk61c-000G6D-Dh@fasolo.debian.org>
- Reply-to: Didier Raboud <odyx@debian.org>
Source: cups-filters Source-Version: 1.28.8-3 Done: Didier Raboud <odyx@debian.org> We believe that the bug you reported is fixed in the latest version of cups-filters, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 988764@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Didier Raboud <odyx@debian.org> (supplier of updated cups-filters package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 21 May 2021 15:54:38 +0200 Source: cups-filters Architecture: source Version: 1.28.8-3 Distribution: experimental Urgency: medium Maintainer: Debian Printing Team <debian-printing@lists.debian.org> Changed-By: Didier Raboud <odyx@debian.org> Closes: 988764 Changes: cups-filters (1.28.8-3) experimental; urgency=medium . [ Mike Gabriel ] * Apparmor: allow read-access to /usr/share/{,cups/}locale (Closes: #988764) Checksums-Sha1: 805c98c9bb48e8ed90f55f823792b91afe6d465d 2930 cups-filters_1.28.8-3.dsc ec15410ff0065c5dd3272099cf01a32a0813c052 83672 cups-filters_1.28.8-3.debian.tar.xz Checksums-Sha256: 25eda9e5a798416f63abbbe37a3d37c7bbc515a4a508d03355384b0f8e2fa29a 2930 cups-filters_1.28.8-3.dsc 893233db8681c22544811849788504332127399faa86ea3e3952fd6eaafde7b0 83672 cups-filters_1.28.8-3.debian.tar.xz Files: a9cbf84f3fa25e51d1864793dd4d429f 2930 net optional cups-filters_1.28.8-3.dsc 98a0128e5f09bd32a1244392af891f31 83672 net optional cups-filters_1.28.8-3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJ3k7rA0YCplkx4gZqcb6xg1jAWkFAmCnvSgACgkQqcb6xg1j AWmcRRAArga5SRnLg5MGhdYToCVu2QYTmjCKHG4ipR4u6Kf6WuRp7fBP5XJV6CrW YYl4EnJcQsEs+0SJqqsIaSnPtU5mZTDH/dogs8Vgu8jY7o+43fPqRu3+TewIcXIF S2E68UrhpzNIkyvdXDMNR6PYGJSBOJQEHVMgHedXp3ABItw1LLA99SXwTK9y0FJ5 IeIbcAtKnru8izBkwMceInHPxAtTMtJ3rmysY3aijd5As4XFDgFTNr+zfZ0S63CC J5Z/BnGM6bQDs+VtCZ3oTeuBlzc0S6ZuttTeGZFKybK2Hv2AiaIXhn+kAI23Fc02 kHIIoa+EbuPZyGFJvaxTXA6bC8PH31LVHj+MyFuCx+rtcS92SGrKBQXX79sZtPyw sNPISwSCs6N55Cz2SS6gDgOUZbLRAWsUZV2Gp+4nySrSHRoEzX3ZxVnlcIOp2KNN qtbLaE9NpOPYcWhadQjo56m8+TJZCSJRjA7ynWwLDX4KEo1q4CyVwUYh0UPmSOjI SzVGpDepgAVPyTuqDvL2J86+wYcpO8UXwcgZDm+8UqXO4CZlAWkqX5im0KKz4lCL 4XoAxI6KGkjo5n80thEtC1HySvnIQbos+BJlOOvthON0Uc0/q3liYiavjsUlDL94 t9xFD6vPiBe7zwX6b1K7Id3Fwr7CxqNQxO9R5TEnT6S+axBOhT8= =toYF -----END PGP SIGNATURE-----
--- End Message ---