Bug#846884: cups-browsed: incomplete app armor profile

[Robert Fantini <fbcadmin@fantinibakery.com>]

Package: cups-browsed
Version: 1.0.61-5+deb8u3
Severity: normal

Dear Maintainer,

 syslog was flooded with thousands of lines like this:

Mar 14 16:01:32 s022 kernel: [106968.865214] audit: type=1400 audit(1457985692.167:106957): apparmor="DENIED" operation="connect" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/cups-browsed" name="run/cups/cups.sock" pid=7006 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0

* I asked about this at proxmox forum [ thread: https://forum.proxmox.com/threads/cups-print-server-on-pve-floods-logs.26813/#post-134662 ]

and was told:
 File a bugreport in the Debian bug tracker for the incomplete app armor profile, extend it locally yourself, don't use cups-browsed or don't confine it with apparmor (recommended in that order ;))


 uninstall cups-browsed stopped log flooding.


PS:
 if there is any more info needed ping me. 




-- System Information:
Debian Release: 8.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)