Bug#846884: cups-browsed: incomplete app armor profile

[Didier 'OdyX' Raboud <odyx@debian.org>]

Control: tags -1 +help

Intri: can you take a look there ? You're our apparmor reference :-)

Le samedi, 3 décembre 2016, 16.59:38 h CET Robert Fantini a écrit :
>  syslog was flooded with thousands of lines like this:
> 
> Mar 14 16:01:32 s022 kernel: [106968.865214] audit: type=1400
> audit(1457985692.167:106957): apparmor="DENIED" operation="connect"
> info="Failed name lookup - disconnected path" error=-13
> profile="/usr/sbin/cups-browsed" name="run/cups/cups.sock" pid=7006
> comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
> 
> * I asked about this at proxmox forum [ thread:
> https://forum.proxmox.com/threads/cups-print-server-on-pve-floods-logs.2681
> 3/#post-134662 ]
> 
> and was told:
>  File a bugreport in the Debian bug tracker for the incomplete app armor
> profile, extend it locally yourself, don't use cups-browsed or don't
> confine it with apparmor (recommended in that order ;))
> 
>  uninstall cups-browsed stopped log flooding.
> 
> PS:
>  if there is any more info needed ping me.

-- 
Cheers,
    OdyX

Attachment: signature.asc
Description: This is a digitally signed message part.