Package: cups-daemon
Version: 2.2.4-3
Severity: normal
Usertags: help-needed
X-Debbugs-Cc: Michael Biebl <>
Tags: moreinfo


Michael Biebl reported today that CUPS failed to delete a printer via
http://localhost:631, and when this happened the following AppArmor
denial was logged:

  audit: type=1400 audit(1502203431.832:71): apparmor="DENIED"
  operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp"
  pid=511 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0

So, Michael, please apply this patch:

--- a/etc/apparmor.d/usr.sbin.cupsd
+++ b/etc/apparmor.d/usr.sbin.cupsd
@@ -13,6 +13,7 @@
   #include <abstractions/nameservice>
   #include <abstractions/perl>
   #include <abstractions/user-tmp>
+  #include <abstractions/wutmp>
   capability chown,
   capability fowner,

Then run:

  sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd

And retry. If it still fails, check if there are other/new
AppArmor denials.


Reply via email to