Bug#915902: cups-client: Printing to a queue with a URI of file:/home/... is not possible

[Brian Potkin <claremont102@gmail.com>]

Package: cups-client
Version: 2.2.9-4
Severity: normal
User: pkg-apparmor-team@lists.alioth.debian.org
Usertags: help-needed



I set up a testing print queue

  lpadmin -p testq -v file:/home/brian/capture -E -m drv:///sample.drv/generic.ppd

and printed to it with

  lp -d testq /etc/nsswitch.conf

The error_log records

  Stopping job because the scheduler could not open the output file.

journalctl has

  Dec 07 18:20:56 test audit[430]: AVC apparmor="DENIED" operation="mknod" \
  profile="/usr/sbin/cupsd" name="/home/brian/capture" pid=430 comm="cupsd" \
  requested_mask="c" denied_mask="c" fsuid=0 ouid=0

  Dec 07 18:20:56 test kernel: audit: type=1400 audit(1544206856.399:19): \
  apparmor="DENIED" operation="mknod" profile="/usr/sbin/cupsd" \
  name="/home/brian/capture" pid=430 comm="cupsd" requested_mask="c" \
  denied_mask="c" fsuid=0 ouid=0

Observed also on 2.2.9-2, 2.2.9-1 and 2.2.8-5. Packages before 2.2.8-5
are not on my system.

(I hope the User* control fields are correct).

Regards,

Brian.