Bug#992378: marked as done (/etc/apparmor.d/usr.sbin.cupsd: Prevents Let's Encrypt certificates from being used)
Your message dated Mon, 06 Sep 2021 10:33:34 +0000
with message-id <E1mNBwU-000DTc-P8@fasolo.debian.org>
and subject line Bug#992378: fixed in cups 2.3.3op2-7
has caused the Debian Bug report #992378,
regarding /etc/apparmor.d/usr.sbin.cupsd: Prevents Let's Encrypt certificates from being used
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
992378: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992378
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: /etc/apparmor.d/usr.sbin.cupsd: Prevents Let's Encrypt certificates from being used
- From: Roger Lynn <roger@rilynn.me.uk>
- Date: Wed, 18 Aug 2021 00:30:00 +0100
- Message-id: <162924300034.30925.16399418544737982221.reportbug@castle.rilynn.me.uk>
Package: cups-daemon
Version: 2.3.3op2-3+deb11u1
Severity: normal
File: /etc/apparmor.d/usr.sbin.cupsd
Adding
/etc/letsencrypt/archive/** r,
seems to fix this.
I only discovered what was causing the problem when I stumbled across
https://askubuntu.com/questions/1079957
Thanks,
Roger
-- System Information:
Debian Release: 11.0
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-8-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages cups-daemon depends on:
ii adduser 3.118
ii bc 1.07.1-2+b2
ii init-system-helpers 1.60
ii libavahi-client3 0.8-5
ii libavahi-common3 0.8-5
ii libc6 2.31-13
ii libcups2 2.3.3op2-3+deb11u1
ii libdbus-1-3 1.12.20-2
ii libelogind0 [libsystemd0] 246.9.1-1+debian1
ii libgssapi-krb5-2 1.18.3-6
ii libpam0g 1.4.0-9
ii libpaper1 1.1.28+b1
ii lsb-base 11.1.0
ii procps 2:3.3.17-5
ii ssl-cert 1.1.0+nmu1
Versions of packages cups-daemon recommends:
pn avahi-daemon <none>
pn colord <none>
pn cups-browsed <none>
pn ipp-usb <none>
Versions of packages cups-daemon suggests:
ii cups 2.3.3op2-3+deb11u1
ii cups-bsd 2.3.3op2-3+deb11u1
ii cups-client 2.3.3op2-3+deb11u1
ii cups-common 2.3.3op2-3+deb11u1
ii cups-filters 1.28.7-1
pn cups-pdf <none>
ii cups-ppdc 2.3.3op2-3+deb11u1
ii cups-server-common 2.3.3op2-3+deb11u1
ii foomatic-db-compressed-ppds [foomatic-db] 20200820-1
ii ghostscript 9.53.3~dfsg-7
ii poppler-utils 20.09.0-3.1
pn smbclient <none>
ii udev 247.3-6
-- Configuration Files:
/etc/cups/cups-files.conf changed:
CreateSelfSignedCerts no
SystemGroup lpadmin
LogFileGroup adm
AccessLog /var/log/cups/access_log
ErrorLog /var/log/cups/error_log
PageLog /var/log/cups/page_log
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: cups
Source-Version: 2.3.3op2-7
Done: Didier Raboud <odyx@debian.org>
We believe that the bug you reported is fixed in the latest version of
cups, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 992378@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Didier Raboud <odyx@debian.org> (supplier of updated cups package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 06 Sep 2021 12:08:09 +0200
Source: cups
Architecture: source
Version: 2.3.3op2-7
Distribution: unstable
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Didier Raboud <odyx@debian.org>
Closes: 992378
Changes:
cups (2.3.3op2-7) unstable; urgency=medium
.
[ Didier Raboud ]
* Remove myself from Uploaders
.
[ Roger Lynn ]
* Apparmor: allow CUPS to read /etc/letsencrypt/archive/ (Closes: #992378)
Checksums-Sha1:
775cbb467969a110b5d837386961e8d47b94ad56 3300 cups_2.3.3op2-7.dsc
2e3f2326038bfe304039b180de6838053bb2fa63 349492 cups_2.3.3op2-7.debian.tar.xz
Checksums-Sha256:
a0205fec3cfbd959fbb4a7ad5cc76792ac66e2c105ef2b30b3906ac776546645 3300 cups_2.3.3op2-7.dsc
01b68018f20ae483ceb69f98c0e9775a837f09b43a605b3d87eba6906230dd4f 349492 cups_2.3.3op2-7.debian.tar.xz
Files:
6cb360cac19bbb6625a7bd452421dc6b 3300 net optional cups_2.3.3op2-7.dsc
bc62879e9557be25b031fbb871119453 349492 net optional cups_2.3.3op2-7.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=JMTe
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: