Bug#1096002: cups-daemon : apparmor errors in the logs

[Francois Mescam <francois@mescam.org>]

Package: cups-daemon
Version: 2.4.10-2+b1
Severity: minor

Dear Maintainer,

In the logs I found these messages many times a day :
Feb 14 08:30:13 eiffel7 kernel: audit: type=1400 audit(1739518213.460:3312): apparmor="DENIED" operation="open" class="file" profile="/usr/sbin/cupsd" name="/etc/paperspecs" pid=662846 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Feb 14 08:30:13 eiffel7 kernel: audit: type=1400 audit(1739518213.768:3313): apparmor="DENIED" operation="capable" class="cap" profile="/usr/sbin/cupsd" pid=662846 comm="cupsd" capability=12  capname="net_admin"

It could be good to not have these messages.

Regards


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.12-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cups-daemon depends on:
ii  adduser                    3.137
ii  bc                         1.07.1-4
ii  init-system-helpers        1.68
ii  libavahi-client3           0.8-16
ii  libavahi-common3           0.8-16
ii  libc6                      2.40-6
ii  libcups2t64                2.4.10-2+b1
ii  libdbus-1-3                1.16.0-1
ii  libgssapi-krb5-2           1.21.3-4
ii  libpam0g                   1.7.0-2
ii  libpaper2                  2.2.5-0.3+b1
ii  libsystemd0                257.2-3
ii  lsb-base                   11.6
ii  procps                     2:4.0.4-7
ii  ssl-cert                   1.1.3
ii  sysvinit-utils [lsb-base]  3.13-1

Versions of packages cups-daemon recommends:
ii  avahi-daemon  0.8-16
ii  colord        1.4.7-1+b2
ii  cups-browsed  1.28.17-5+b2
ii  ipp-usb       0.9.23-2+b3

Versions of packages cups-daemon suggests:
ii  cups                                       2.4.10-2+b1
ii  cups-bsd                                   2.4.10-2+b1
ii  cups-client                                2.4.10-2+b1
ii  cups-common                                2.4.10-2
ii  cups-filters                               1.28.17-5+b2
pn  cups-pdf                                   <none>
ii  cups-ppdc                                  2.4.10-2+b1
ii  cups-server-common                         2.4.10-2
ii  foomatic-db-compressed-ppds [foomatic-db]  20230202-1
ii  ghostscript                                10.04.0~dfsg-2+b1
ii  poppler-utils                              25.01.0-4
ii  smbclient                                  2:4.21.3+dfsg-6+b1
ii  udev                                       257.2-3

-- no debconf information