Package: cups-daemon
Version: 2.2.4-3
Severity: normal
User: pkg-apparmor-t...@lists.alioth.debian.org
Usertags: help-needed
X-Debbugs-Cc: Michael Biebl <bi...@debian.org>
Tags: moreinfo

Hi,

Michael Biebl reported today that CUPS failed to delete a printer via
http://localhost:631, and when this happened the following AppArmor
denial was logged:

  audit: type=1400 audit(1502203431.832:71): apparmor="DENIED"
  operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp"
  pid=511 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0
  ouid=0

So, Michael, please apply this patch:

--- a/etc/apparmor.d/usr.sbin.cupsd
+++ b/etc/apparmor.d/usr.sbin.cupsd
@@ -13,6 +13,7 @@
   #include <abstractions/nameservice>
   #include <abstractions/perl>
   #include <abstractions/user-tmp>
+  #include <abstractions/wutmp>
 
   capability chown,
   capability fowner,

Then run:

  sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd

And retry. If it still fails, check if there are other/new
AppArmor denials.

Thanks!

Reply via email to