Bug#871537: cups-daemon: Fails to delete a printer via http://localhost:631 (AppArmor-related?)

[Michael Biebl]

Hi

Am 31.10.2017 um 07:59 schrieb intrigeri:
> Hi Michael,
> 
> do you need more time to test the proposed fix, or should we find
> someone else to do it?

Sorry for not responding earlier. Seems this email fell through the cracks.
Now, it seems I can't reproduce the original issue anymore :-/
So unless someone runs into this problem, this bug report should be
closed I guess.

Regards,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature

Bug#871537: cups-daemon: Fails to delete a printer via http://localhost:631 (AppArmor-related?)

[intrigeri]

Hi Michael,

do you need more time to test the proposed fix, or should we find
someone else to do it?

Cheers,
-- 
intrigeri

Bug#871537: cups-daemon: Fails to delete a printer via http://localhost:631 (AppArmor-related?)

[intrigeri]

Package: cups-daemon
Version: 2.2.4-3
Severity: normal
User: pkg-apparmor-t...@lists.alioth.debian.org
Usertags: help-needed
X-Debbugs-Cc: Michael Biebl 
Tags: moreinfo

Hi,

Michael Biebl reported today that CUPS failed to delete a printer via
http://localhost:631, and when this happened the following AppArmor
denial was logged:

  audit: type=1400 audit(1502203431.832:71): apparmor="DENIED"
  operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp"
  pid=511 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0
  ouid=0

So, Michael, please apply this patch:

--- a/etc/apparmor.d/usr.sbin.cupsd
+++ b/etc/apparmor.d/usr.sbin.cupsd
@@ -13,6 +13,7 @@
   #include 
   #include 
   #include 
+  #include 
 
   capability chown,
   capability fowner,

Then run:

  sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd

And retry. If it still fails, check if there are other/new
AppArmor denials.

Thanks!