Bug#846884: cups-browsed: incomplete app armor profile

[intrigeri <intrigeri@debian.org>]

Control: tags -1 +moreinfo

Hi,

Didier 'OdyX' Raboud:
> Control: tags -1 +help

> Intri: can you take a look there ? You're our apparmor reference :-)

Sure.

I cannot reproduce this on current sid, so we'll have to rely on
Robert to confirm that tentative fixes work.

I guess that it's LP#1373070 again. We've workaround'ed it in src:cups
2.0.2-1 for the usr.sbin.cupsd profile; I bet we need to do the same
for usr.sbin.cups-browsed.

Robert, can you please patch /etc/apparmor.d/usr.sbin.cups-browsed
this way:

--- a/apparmor.d/usr.sbin.cups-browsed
+++ b/apparmor.d/usr.sbin.cups-browsed
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-/usr/sbin/cups-browsed {
+/usr/sbin/cups-browsed flags=(attach_disconnected) {
   #include <abstractions/base>
   #include <abstractions/nameservice>
   #include <abstractions/cups-client>

... then reload the profile with:

   sudo apparmor_parser -v -r /etc/apparmor.d/usr.sbin.cups-browsed,

... then restart the service:

   sudo service cups-browsed.service restart

... and finally, check if the problem is still present?

Cheers,
-- 
intrigeri