Re: Bug#931363: Fails to create output PDF (permission denied)
- To: martin f krafft <madduck@debian.org>
- Cc: Brian Potkin <claremont102@gmail.com>, 931363@bugs.debian.org, Martin-Éric Racine <martin-eric.racine@iki.fi>, "Volker C. Behr" <volker@cups-pdf.de>, Debian Printing Team <debian-printing@lists.debian.org>
- Subject: Re: Bug#931363: Fails to create output PDF (permission denied)
- From: intrigeri <intrigeri@debian.org>
- Date: Wed, 18 Sep 2019 08:42:54 +0200
- Message-id: <[🔎] 87h85a14wh.fsf@manticora>
- In-reply-to: <06072019122627.142d67f89459@desktop.copernicus.org.uk>
- References: <CAPZXPQc_ZOhh_WUXwDsQ8nkEBudVzyGkrNWpkgTfYQ+_JQAYGw@mail.gmail.com> <20190703094013.GA13862@albatross.lehel.madduck.net> <CAPZXPQcE2dxR7chYFDU1jSXcz4hsk15PJu68G0u3e6xit9TuLA@mail.gmail.com> <20190703110815.GA29157@albatross.lehel.madduck.net> <CAPZXPQdz+PT88M83E5j5h8oND8yyvENi2HwFL4sZUzi8S03V1A@mail.gmail.com> <20190703113448.GA10683@albatross.lehel.madduck.net> <20190703115111.GA24748@albatross.lehel.madduck.net> <CAPZXPQfxc1rVdzMpq7DxtTep7jMLis1_q=ZhyjgAPQJp-ztQ1A@mail.gmail.com> <20190703075229.GA12110@albatross.lehel.madduck.net> <CAPZXPQdJVLugeYGeLU4HSD8uyn3rc3AXOJAnKu0QYcMDxoVXwQ@mail.gmail.com> <20190703075229.GA12110@albatross.lehel.madduck.net> <06072019122627.142d67f89459@desktop.copernicus.org.uk>
Control: tag -1 + moreinfo
Hi,
Brian Potkin:
> I wonder whether apparmor is involved? The journal is a place to look.
Indeed. It looks like Martin's $HOME directory is /home/ssd/madduck,
which is not covered by AppArmor's default @{HOME} tunable ("variable").
I suspect Martin will thus see AppArmor denials in his kernel logs.
To teach AppArmor about this local non-standard home directory layout,
add this line to /etc/apparmor.d/tunables/home.d/site.local :
@{HOMEDIRS}+=/home/ssd/
Then reload the cups profile(s):
sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd
Martin, could you please confirm this fixes the problem for you?
Thanks in advance!
Cheers,
--
intrigeri
Reply to: