Bug#883765: cups-client: Unsupported document-format "application/octet-stream".

[Brian Potkin <claremont102@gmail.com>]

For the attention of intrigeri:

Mathew's mail is in reply to

https://lists.debian.org/debian-printing/2017/12/msg00032.html

He and I have spent some time is looking at a number of issues he has
experienced with the printing system when upgrading from jessie to
buster. It looks like apparmor is involved. I do not experience them.


On Mon 11 Dec 2017 at 22:28:15 +0530, P V Mathew wrote:

> as requested have reinstalled apparmor
> 
> The following programs are not working
> 
> man(from command line) but man2html ok
> 
> icedove - (double free error} ---bizarre? Using standalone download of
> thunderbird for this mail.
> 
> cups started on reboot but by the time logged in, it had stopped.
> 
> cups was restarted and command
> 
> lp -d PDF a.ps was used
> 
> the subject error returned.
> 
> but eventually cups stopped again.
> 
> dmesg showed some sort of infinite loop?
> 
> Oops. realize now, may be about 2-3 years ago when my var partition got
> full,
> 
> had moved the var/log on to /home/ and sym-linked to it in var. May be
> 
> this is not consistent with apparmor(not sure?).

When I do that I can still print but the error_log is not written to
because cupsd cannot change the permissions on /var/log/cups (as shown
by systemctl status cups after restarting cups).

> any way,  pieces of dmesg|grep cups attached.  Not possible to attach full
> 
> file as similar lines keeps repeating.
> 
> Please let me know if any more input is required.

Thanks, Mathew.

>From bb.bbz2:

[ 2121.775238] audit: type=1400 audit(1513009058.480:17316): apparmor="DENIED" \
               operation="chown" profile="/usr/sbin/cupsd" name="/home/log/cups/" \
               pid=5896 comm="cupsd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0                   

[ 2121.775251] audit: type=1400 audit(1513009058.480:17317): apparmor="DENIED" \
               operation="capable" profile="/usr/sbin/cupsd" pid=5896 comm="cupsd" \
               capability=12  capname="net_admin"

apparmor is new to buster and I am new to apparmor; but this looks like
cupsd has been refused write permission.

intrigeri is our lifeline for things apparmor, so I have cc'ed him (her?)
for advice.

Cheers,

Brian.