--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: cups-daemon: apparmor DENIED
- From: gregor herrmann <gregoa@debian.org>
- Date: Mon, 21 Aug 2017 16:53:32 +0200
- Message-id: <150332721209.1488.11856688213382425660.reportbug@jadzia.comodo.priv.at>
Package: cups-daemon
Version: 2.2.4-3
Severity: normal
User: pkg-apparmor-team@lists.alioth.debian.org
Usertags: help-needed
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
apparmor newbie here.
Without doing anything printer-related, aa-notify informed me about
an apparmor problem with cupsd; syslog says:
Aug 21 16:40:22 jadzia kernel: [95510.664500] audit: type=1400 audit(1503326422.923:230): apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=21581 comm="cupsd" capability=2 capname="dac_read_search"
Thanks in advance for checking!
Cheers,
gregor
- -- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500, 'oldoldstable'), (500, 'experimental'), (500, 'testing'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=de_AT.utf8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)
Versions of packages cups-daemon depends on:
ii adduser 3.116
ii bc 1.06.95-9+b3
ii dpkg 1.18.24
ii init-system-helpers 1.49
ii libavahi-client3 0.6.32-2
ii libavahi-common3 0.6.32-2
ii libc6 2.24-14
ii libcups2 2.2.4-3
ii libcupsmime1 2.2.4-3
ii libdbus-1-3 1.11.16+really1.10.22-1
ii libgssapi-krb5-2 1.15.1-2
ii libpam0g 1.1.8-3.6
ii libpaper1 1.1.24+nmu5
ii libsystemd0 234-2
ii lsb-base 9.20161125
ii procps 2:3.3.12-3
ii ssl-cert 1.0.39
Versions of packages cups-daemon recommends:
pn avahi-daemon <none>
pn colord <none>
ii cups-browsed 1.16.1-1
Versions of packages cups-daemon suggests:
ii cups 2.2.4-3
ii cups-bsd 2.2.4-3
ii cups-client 2.2.4-3
ii cups-common 2.2.4-3
ii cups-filters [foomatic-filters] 1.16.1-1
ii cups-ppdc 2.2.4-3
ii cups-server-common 2.2.4-3
ii foomatic-db 20170723-1
ii ghostscript 9.21~dfsg-1
pn hplip <none>
ii poppler-utils 0.48.0-2
ii printer-driver-cups-pdf [cups-pdf] 3.0.1-4
ii printer-driver-gutenprint 5.2.13-1
ii printer-driver-hpcups 3.17.7+repack0-3
ii smbclient 2:4.6.7+dfsg-1
ii udev 234-2
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAlma8+tfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx
RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ
qgaItw//Q9aKvAerAeAuYbMgWN9tAdG3LneK9xA+anDUEOlKzi4eFjdZY+PJb+Oh
dgsVmRSjxZO9oxl/Uc3wjVmxWpaJy/aLgfpfkoS+Pm9bm/pWOg8jubY3D5GrwFiV
1Pl13GnGX9w9pXZvkYvcYy1NMYa2Q2vQgaj9uVtuEPcXN//q4TMOEmZHfYAo0fwE
6CyA8/yhQV2xsTeaGkCwlo18Qwnh9ITlCRCjG8JqVoD/YaW0lzQ2VVGWYdOnTGXe
qbEe+InO0btv8y/mFMzv9aH3u/EiGomWlCYXjwMZG0a1QyvG1porS5Ct6OClUm3W
THFSB3IPNdKErc5V9CWZqZpM865K2iO619VqFKzt7QQvfhTqUm9NBVmZ62LQ5ljP
U6yBOE7/zoEh8obDhdkuUYD/4psLTOyU9QDtqfNa+wRttY9ffFEdbeoGuBqCW67f
JvPfi3sfi31UH4xCa5kd034YV0dUet6bq6tyZBwqj50a4xa4Ei0JXDRgbBRQwdcb
55Cq26TJh1Aee14/GburVszn+EShm3tYJWpuD0NyZ4CjshTAhtNrkbSKw+GNStE5
9Z/+NId3ALikU7m1/spcfQudvnopxS7jMciQ6/Vm7LGj8M8fldP0rPe6DFwhKGhD
ZLFfsSbl+fjJHYrRtUlMIOngAPw2G2pAuo9QxX6rB/PY9xz0XWU=
=KOsB
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
- To: 872817-close@bugs.debian.org
- Subject: Bug#872817: fixed in cups 2.2.4-83-gbefbadcef-2
- From: Didier Raboud <odyx@debian.org>
- Date: Mon, 04 Sep 2017 07:34:30 +0000
- Message-id: <E1doltu-000EK8-V8@fasolo.debian.org>
Source: cups
Source-Version: 2.2.4-83-gbefbadcef-2
We believe that the bug you reported is fixed in the latest version of
cups, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 872817@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Didier Raboud <odyx@debian.org> (supplier of updated cups package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 04 Sep 2017 09:16:43 +0200
Source: cups
Binary: libcups2 libcupsimage2 libcupscgi1 libcupsmime1 libcupsppdc1 cups cups-core-drivers cups-daemon cups-client cups-ipp-utils libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-server-common cups-ppdc
Architecture: source
Version: 2.2.4-83-gbefbadcef-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Didier Raboud <odyx@debian.org>
Description:
cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa
cups-bsd - Common UNIX Printing System(tm) - BSD commands
cups-client - Common UNIX Printing System(tm) - client programs (SysV)
cups-common - Common UNIX Printing System(tm) - common files
cups-core-drivers - Common UNIX Printing System(tm) - driverless printing
cups-daemon - Common UNIX Printing System(tm) - daemon
cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities
cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities
cups-server-common - Common UNIX Printing System(tm) - server common files
libcups2 - Common UNIX Printing System(tm) - Core library
libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library
libcupscgi1 - Common UNIX Printing System(tm) - CGI library
libcupsimage2 - Common UNIX Printing System(tm) - Raster image library
libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li
libcupsmime1 - Common UNIX Printing System(tm) - MIME library
libcupsppdc1 - Common UNIX Printing System(tm) - PPD manipulation library
Closes: 872817
Changes:
cups (2.2.4-83-gbefbadcef-2) experimental; urgency=medium
.
[ intrigeri ]
* AppArmor: allow dac_read_search, now needed on top of dac_override
(Closes: #872817)
Checksums-Sha1:
70f41286afb88bc84e0da7ab9c8b36beca0294c3 3241 cups_2.2.4-83-gbefbadcef-2.dsc
1b38ee4b270c61f9101378ab23f84dd5c59f550d 346384 cups_2.2.4-83-gbefbadcef-2.debian.tar.xz
856df71e76cdb96b1ea13218c9b19ea7eaa952cc 8518 cups_2.2.4-83-gbefbadcef-2_source.buildinfo
Checksums-Sha256:
66146e76b57502999b8aaf509b9fe4ddc31ca5a5f1f4e5c2751629187e1fca10 3241 cups_2.2.4-83-gbefbadcef-2.dsc
c19f436bd7c5d505f655d1b32e90f233d4cef25954ca4880374a041aa0c3f14a 346384 cups_2.2.4-83-gbefbadcef-2.debian.tar.xz
2d5fd6f3657c1135d1570a0da6a6aa61e5647586f938031cc1496b8d9fc896f1 8518 cups_2.2.4-83-gbefbadcef-2_source.buildinfo
Files:
c96f0a43679d2d34a517104a8a3ee8c8 3241 net optional cups_2.2.4-83-gbefbadcef-2.dsc
6dd3da3c1bcbe933fc516f16a37d5a34 346384 net optional cups_2.2.4-83-gbefbadcef-2.debian.tar.xz
73a45ff12de3bcc39eebbe2200ec5623 8518 net optional cups_2.2.4-83-gbefbadcef-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQGzBAEBCgAdFiEEe+WPIRpjNw1/GSB7i8+nHsoWNFUFAlms/kUACgkQi8+nHsoW
NFVfHgwAkRzbAj3Iwjc27pUuC8pTH3lQ89YW2e0J/RP/Fze2qScAqvP4YLrjtc24
HniDQNDlCUJirRZ5N8LkVPe5eFMAIzdJo2CyZVYxWu5q8g/qe3ijpLWir8ABj/+T
Po80+/kPmisQaDDzh4s6DShefAkAI/D3p0kYFbD22IM3uap6rUghOzAUNGCTRYZW
LG8L9W6+vE574LYjdjrhAAhCBrJ6dU3gbjiOB6c5Y5bixYL+YFkIyOCLHn6m5Yfj
1SPJnRwk8SgdrjEK5um8kR3BifiH3nO4CwxqdvtEoHP7phPCeSSidKra90hUXmBb
77g4X1PcUr9ZJ0CflifUCxtw4IyXh3X0zrKL5jRMBpWL0npp1U4GY/eRG7pzdUeR
aEmvQL8skHOVil7eXW8/3fxIKvQK1DKmOdGRK/zKvZc0hQDDE8VysTyTj78W7aPz
B0xzaIfLgEdV6RJ+MFXBhFMK/HuQHyboM7Dryk2DjXJUqTMCCMnWdD8w6DKYGVCv
eWb02EF5
=+UcM
-----END PGP SIGNATURE-----
--- End Message ---