** Patch added: "lp1276630.patch" https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1276630/+attachment/3969889/+files/lp1276630.patch
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups-filters in Ubuntu. https://bugs.launchpad.net/bugs/1276630 Title: cups-browsed upstart job does not load the apparmor profile for cups- browsed Status in “cups-filters” package in Ubuntu: New Bug description: On up to date trust I noticed that: $ sudo aa-status apparmor module is loaded. 124 profiles are loaded. ... /usr/sbin/cups-browsed 0 profiles are in complain mode. 32 processes have profiles defined. 31 processes are in enforce mode. ... 0 processes are in complain mode. 1 processes are unconfined but have a profile defined. /usr/sbin/cups-browsed (1222) This means that while there is an apparmor profile for cups-browsed and it is loaded (good), it is being loaded into the kernel after /usr/sbin/cups-browsed is started which means that /usr/sbin/cups- browsed is running unconfined (bad). Fix is to adjust the upstart job to either use /lib/init/apparmor- profile-load in the pre-start or to use the new apparmor stanza in the upstart job. Since cups itself is still using /lib/init/apparmor- profile-load, attached is a patch to use it for cups-browsed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1276630/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
