--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: cups-daemon: apparmor DENIED
- From: gregor herrmann <gregoa@debian.org>
- Date: Mon, 21 Aug 2017 16:53:32 +0200
- Message-id: <150332721209.1488.11856688213382425660.reportbug@jadzia.comodo.priv.at>
Package: cups-daemon
Version: 2.2.4-3
Severity: normal
User: pkg-apparmor-team@lists.alioth.debian.org
Usertags: help-needed
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
apparmor newbie here.
Without doing anything printer-related, aa-notify informed me about
an apparmor problem with cupsd; syslog says:
Aug 21 16:40:22 jadzia kernel: [95510.664500] audit: type=1400 audit(1503326422.923:230): apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=21581 comm="cupsd" capability=2 capname="dac_read_search"
Thanks in advance for checking!
Cheers,
gregor
- -- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500, 'oldoldstable'), (500, 'experimental'), (500, 'testing'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=de_AT.utf8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)
Versions of packages cups-daemon depends on:
ii adduser 3.116
ii bc 1.06.95-9+b3
ii dpkg 1.18.24
ii init-system-helpers 1.49
ii libavahi-client3 0.6.32-2
ii libavahi-common3 0.6.32-2
ii libc6 2.24-14
ii libcups2 2.2.4-3
ii libcupsmime1 2.2.4-3
ii libdbus-1-3 1.11.16+really1.10.22-1
ii libgssapi-krb5-2 1.15.1-2
ii libpam0g 1.1.8-3.6
ii libpaper1 1.1.24+nmu5
ii libsystemd0 234-2
ii lsb-base 9.20161125
ii procps 2:3.3.12-3
ii ssl-cert 1.0.39
Versions of packages cups-daemon recommends:
pn avahi-daemon <none>
pn colord <none>
ii cups-browsed 1.16.1-1
Versions of packages cups-daemon suggests:
ii cups 2.2.4-3
ii cups-bsd 2.2.4-3
ii cups-client 2.2.4-3
ii cups-common 2.2.4-3
ii cups-filters [foomatic-filters] 1.16.1-1
ii cups-ppdc 2.2.4-3
ii cups-server-common 2.2.4-3
ii foomatic-db 20170723-1
ii ghostscript 9.21~dfsg-1
pn hplip <none>
ii poppler-utils 0.48.0-2
ii printer-driver-cups-pdf [cups-pdf] 3.0.1-4
ii printer-driver-gutenprint 5.2.13-1
ii printer-driver-hpcups 3.17.7+repack0-3
ii smbclient 2:4.6.7+dfsg-1
ii udev 234-2
- -- no debconf information
-----BEGIN PGP SIGNATURE-----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=KOsB
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: cups
Source-Version: 2.2.4-6
We believe that the bug you reported is fixed in the latest version of
cups, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 872817@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Didier Raboud <odyx@debian.org> (supplier of updated cups package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 04 Sep 2017 09:22:26 +0200
Source: cups
Binary: libcups2 libcupsimage2 libcupscgi1 libcupsmime1 libcupsppdc1 cups cups-core-drivers cups-daemon cups-client cups-ipp-utils libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-server-common cups-ppdc
Architecture: source
Version: 2.2.4-6
Distribution: unstable
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Didier Raboud <odyx@debian.org>
Description:
cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa
cups-bsd - Common UNIX Printing System(tm) - BSD commands
cups-client - Common UNIX Printing System(tm) - client programs (SysV)
cups-common - Common UNIX Printing System(tm) - common files
cups-core-drivers - Common UNIX Printing System(tm) - driverless printing
cups-daemon - Common UNIX Printing System(tm) - daemon
cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities
cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities
cups-server-common - Common UNIX Printing System(tm) - server common files
libcups2 - Common UNIX Printing System(tm) - Core library
libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library
libcupscgi1 - Common UNIX Printing System(tm) - CGI library
libcupsimage2 - Common UNIX Printing System(tm) - Raster image library
libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li
libcupsmime1 - Common UNIX Printing System(tm) - MIME library
libcupsppdc1 - Common UNIX Printing System(tm) - PPD manipulation library
Closes: 872817
Changes:
cups (2.2.4-6) unstable; urgency=medium
.
[ intrigeri ]
* AppArmor: allow dac_read_search, now needed on top of dac_override
(Closes: #872817)
Checksums-Sha1:
54d0f1f8c3ebc047ff66be0a239c53b6027b2ef1 3158 cups_2.2.4-6.dsc
ef1c4888d81701268a13674a10d2fbab682b0fcb 352024 cups_2.2.4-6.debian.tar.xz
942541dd7b70fda0a9bf026787c4490fb9407eb3 8462 cups_2.2.4-6_source.buildinfo
Checksums-Sha256:
a2c9b3c8b2a448f2579126671183bad9180630554bc59b59ebaad70ada97f586 3158 cups_2.2.4-6.dsc
f8a8d0151983b5514f6433115b720022dd731fc78ad68594e2802d7d43cb32b8 352024 cups_2.2.4-6.debian.tar.xz
1a45b4014e63d8648cf0021fc7aabda098d63e7d614774923311c88e963fef42 8462 cups_2.2.4-6_source.buildinfo
Files:
95d596c2064e15753b51794469fc410c 3158 net optional cups_2.2.4-6.dsc
ed062743f9957ae312bc90337adeacd4 352024 net optional cups_2.2.4-6.debian.tar.xz
5ed0ed1206d9c275a89ed45c778d33e4 8462 net optional cups_2.2.4-6_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=JCB0
-----END PGP SIGNATURE-----
--- End Message ---