Bug#882937: apparmor: cupsd profile blocks creation of PDF files with printer-driver-cups-pdf

[Brian Potkin <claremont102@gmail.com>]

On Thu 07 Dec 2017 at 10:51:26 +0100, intrigeri wrote:

> Hi Nuno,
> 
> Nuno Oliveira:
> > type=AVC msg=audit(1511871104.395:10445): apparmor="DENIED" operation="mknod"
> > profile="/usr/lib/cups/backend/cups-pdf"
> > name="/home/host/nuno/PDF/me_host_nuno_PDF.pdf" pid=2095 comm="gs" requested_mask="c"
> > denied_mask="c" fsuid=1000 ouid=1000
> 
> I see. Am I guessing right that $HOME == /home/host/nuno?

Looks that way/
 
> If using a non-standard parent directory for home directories, you'll
> need to let AppArmor know about it. Thankfully we have everything in
> place to do this: adding @{HOMEDIRS}+=/home/host to
> /etc/apparmor.d/tunables/home.d/site.local should do the trick.
> Then, "sudo systemctl restart apparmor" and retry.
> 
> Does this fix the problem you're experiencing?

Does this work for you, Nuno?

Regards,

Brian.