[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1005813: debian-edu-config: apparmor blocks cups-browsed.conf from being read

Package: debian-edu-config
Version: 2.12.16
Severity: important
Control: found -1 2.11.56+deb11u3

I debugged an issue in CUPS today where it seemed impossible to see any changes to /etc/cups/cups-browsed.conf (which is a symlink and points to /etc/cups/cups-browsed-debian-edu.conf) being applied when restarting the cups-browsed service.

Cause of the problem is apparmor and a missing white-list entry for /etc/cups/cups-browsed-debian-edu.conf.

I searched for other files being mentioned in apparmor config, being shipped under a different name in debian-edu-config, symlinked to the original filepath and possibly thus being blocked by apparmor:

/etc/apparmor.d/usr.sbin.named:  /etc/samba/smb.conf r,
/etc/apparmor.d/abstractions/winbind:  /etc/samba/smb.conf         r,
/etc/apparmor.d/usr.sbin.cups-browsed:  /etc/cups/cups-browsed.conf r,

This issue prevents our custom settings in /etc/cups/cups-browsed-debian-edu.conf to become effective on Debian Edu workstations and also on the mainserver. This needs to be adjusted for Debian Edu bullseye and testing/unstable.


c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

Attachment: pgp6ASri97dAW.pgp
Description: Digitale PGP-Signatur

Reply to: