Bug#1100755: /etc/apparmor.d/usr.sbin.cupsd: cups-daemon: Apparmor profile blocks reading /etc/paperspecs
Package: cups
Version: 2.4.10-3
Followup-For: Bug #1100755
And not just /etc/paperspecs, also /etc/magic:
Aug 8 16:40:38 black kernel: audit: type=1400 audit(1754667638.473:153): apparmor="DENIED" operation="open" class="file" profile="/u
sr/sbin/cupsd" name="/etc/magic" pid=1493317 comm="file" requested_mask="r" denied_mask="r" fsuid=7 ouid=0
Aug 8 16:40:40 black kernel: audit: type=1400 audit(1754667640.065:154): apparmor="DENIED" operation="open" class="file" profile="/u
sr/sbin/cupsd" name="/etc/paperspecs" pid=1493323 comm="gs" requested_mask="r" denied_mask="r" fsuid=7 ouid=0
Aug 8 16:40:40 black kernel: audit: type=1400 audit(1754667640.065:155): apparmor="DENIED" operation="open" class="file" profile="/u
sr/sbin/cupsd" name="/etc/paperspecs" pid=1493323 comm="gs" requested_mask="r" denied_mask="r" fsuid=7 ouid=0
And usb (I assume this is for access to my label printer which is not currently plugged in):
Aug 8 16:31:53 black kernel: audit: type=1400 audit(1754667113.317:151): apparmor="DENIED" operation="capable" class="cap" profile="
/usr/sbin/cupsd" pid=1487315 comm="usb" capability=21 capname="sys_admin"
And something to do with network???
Aug 8 15:17:42 black kernel: audit: type=1400 audit(1754662662.427:150): apparmor="DENIED" operation="capable" class="cap" profile="
/usr/sbin/cupsd" pid=1446620 comm="cupsd" capability=12 capname="net_admin"
Hints on how to tell apparmor to handleallow these as well would be useful.
-- System Information:
Debian Release: 13.0
APT prefers testing
APT policy: (900, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.12.32-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_IE.utf8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cups depends on:
ii cups-client 2.4.10-3
ii cups-common 2.4.10-3
ii cups-core-drivers 2.4.10-3
ii cups-daemon 2.4.10-3
ii cups-filters 1.28.17-6
ii cups-ppdc 2.4.10-3
ii cups-server-common 2.4.10-3
ii debconf [debconf-2.0] 1.5.91
ii ghostscript 10.05.1~dfsg-1
ii libavahi-client3 0.8-16
ii libavahi-common3 0.8-16
ii libc6 2.41-8
ii libcups2t64 2.4.10-3
ii libgcc-s1 14.2.0-19
ii libstdc++6 14.2.0-19
ii libusb-1.0-0 2:1.0.28-1
ii poppler-utils 25.03.0-4
ii procps 2:4.0.4-8
Versions of packages cups recommends:
ii avahi-daemon 0.8-16
ii colord 1.4.7-3
Versions of packages cups suggests:
ii cups-bsd 2.4.10-3
pn cups-pdf <none>
ii foomatic-db 20230202-1
ii smbclient 2:4.22.2+dfsg-1
ii udev 257.6-1
-- Configuration Files:
/etc/default/cups changed:
-- debconf-show failed
Reply to: