Bug#871537: cups-daemon: Fails to delete a printer via http://localhost:631 (AppArmor-related?)
Package: cups-daemon
Version: 2.2.4-3
Severity: normal
User: pkg-apparmor-team@lists.alioth.debian.org
Usertags: help-needed
X-Debbugs-Cc: Michael Biebl <biebl@debian.org>
Tags: moreinfo
Hi,
Michael Biebl reported today that CUPS failed to delete a printer via
http://localhost:631, and when this happened the following AppArmor
denial was logged:
audit: type=1400 audit(1502203431.832:71): apparmor="DENIED"
operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp"
pid=511 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0
ouid=0
So, Michael, please apply this patch:
--- a/etc/apparmor.d/usr.sbin.cupsd
+++ b/etc/apparmor.d/usr.sbin.cupsd
@@ -13,6 +13,7 @@
#include <abstractions/nameservice>
#include <abstractions/perl>
#include <abstractions/user-tmp>
+ #include <abstractions/wutmp>
capability chown,
capability fowner,
Then run:
sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd
And retry. If it still fails, check if there are other/new
AppArmor denials.
Thanks!
Reply to: