Bug#954953: cups-daemon: apparmor prevents opening /proc/sys/kernel/random/boot_id
Package: cups-daemon
Version: 2.3.1-11
Severity: normal
Dear Maintainer,
I have hundreds of such messages in my log:
mar 25 19:46:47 kernel: audit: type=1400 audit(1585162007.825:8740): apparmor="DENIED" operation="open" profile="/usr/sbin/cupsd" name="/proc/sys/kernel/random/boot_id" pid=678 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
mar 25 19:46:47 kernel: audit: type=1400 audit(1585162007.825:8741): apparmor="DENIED" operation="open" profile="/usr/sbin/cupsd" name="/proc/sys/kernel/random/boot_id" pid=678 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
mar 25 19:46:47 kernel: audit: type=1400 audit(1585162007.825:8742): apparmor="DENIED" operation="open" profile="/usr/sbin/cupsd" name="/proc/sys/kernel/random/boot_id" pid=678 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
I know that it didn't start right away, but I don't know what triggered it...
Thanks for your work,
--
Rémi
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.4.0-4-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cups-daemon depends on:
ii adduser 3.118
ii bc 1.07.1-2+b2
ii init-system-helpers 1.57
ii libavahi-client3 0.7-5
ii libavahi-common3 0.7-5
ii libc6 2.30-2
ii libcups2 2.3.1-11
ii libdbus-1-3 1.12.16-2
ii libgssapi-krb5-2 1.17-6
ii libpam0g 1.3.1-5
ii libpaper1 1.1.28+b1
ii libsystemd0 245.2-1
ii lsb-base 11.1.0
ii procps 2:3.3.16-4
ii ssl-cert 1.0.39
Versions of packages cups-daemon recommends:
ii avahi-daemon 0.7-5
ii colord 1.4.4-2
ii cups-browsed 1.27.3-1
Versions of packages cups-daemon suggests:
ii cups 2.3.1-11
ii cups-bsd 2.3.1-11
ii cups-client 2.3.1-11
ii cups-common 2.3.1-11
ii cups-filters 1.27.3-1
pn cups-pdf <none>
ii cups-ppdc 2.3.1-11
ii cups-server-common 2.3.1-11
ii foomatic-db-compressed-ppds [foomatic-db] 20200219-1
ii ghostscript 9.52~dfsg-1
ii poppler-utils 0.71.0-6
ii smbclient 2:4.11.5+dfsg-1+b1
ii udev 245.2-1
-- no debconf information
Reply to: