Bug#940578: fixed in cups 2.3.0-6
Hi,
Rudolf Polzer:
> For me it is still not working, because I changed
> /etc/cups/cups-pdf.conf
> from
> Out ${HOME}/Transport
> to
> Out ${HOME}
> and get the error message
> audit[5146]: AVC apparmor="DENIED" operation="mknod"
> profile="/usr/lib/cups/backend/cups-pdf" name="/home/rudi/home_rudi.pdf"
> pid=5146 comm="gs" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Indeed, the fix only covers sub-directories of $HOME.
Technically it's easy to also support this use case.
I'm happy to implement this if the CUPS maintainers
prefer a more lenient AppArmor confinement of cups-pdf,
in order to improve UX in this (arguably corner) case.
Cheers,
--
intrigeri
Reply to: