[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
The Precise Pangolin has reached end of life, so this bug will not be fixed for that release ** Changed in: apparmor (Ubuntu Precise) Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
My computer has slow boot times because this error Tail of dmesg [ 44.672089] input: Bluetooth Laser Travel Mouse as /devices/pci:00/:00:1d.0/usb2/2-1/2-1.5/2-1.5:1.0/bluetooth/hci0/hci0:35/input12 [ 44.672198] hid-generic 0005:046D:B008.0001: input,hidraw0: BLUETOOTH HID v3.13 Mouse [Bluetooth Laser Travel Mouse] on 84:a6:c8:b2:0a:83 [ 96.021989] audit_printk_skb: 30 callbacks suppressed [ 96.021992] type=1400 audit(1420316542.197:28): apparmor=DENIED operation=capable parent=1 profile=/usr/sbin/cupsd pid=1370 comm=cupsd pid=1370 comm=cupsd capability=36 capname=block_suspend [ 118.923987] type=1400 audit(1420316565.113:29): apparmor=DENIED operation=capable parent=1 profile=/usr/sbin/cupsd pid=1370 comm=cupsd pid=1370 comm=cupsd capability=36 capname=block_suspend In my case is not cosmetic. I need a patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
This has also rendered my HP all-in-one useless. ** Attachment added: cups_defect.txt https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+attachment/4039506/+files/cups_defect.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
@dogstar1: Your printing problem is likely unrelated to this issue. Please file a new bug for that. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Marc, this is not a cosmetic issue. My HP printer no longer works after updating to 12.04.4 using 3.8 or 3.11 kernels. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
@tony.damato: Your printing problem is likely unrelated to this issue. Please file a new bug for that. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: cups (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Jamie, Marc, is there still something needed to get fixed in CUPS? If yes, what? Can you fix that or provide a patch? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
@mdeslaur thanks for the patch. Is there any workaround while we wait for a new package to be released? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
It should just be a cosmetic issue, so there is no rush to get a new package. You can simply ignore the log message for now. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Maybe this is a stupid question, but, if this is apparmor related, and apparmor 2.8 has this patch included, why is apparmor 2.8.2 (from ppa :apparmor-upload/apparmor-2.8) still complaining about block_suspend!? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
It's not fixed in a particular version of AppArmor. When the package is built, it dynamically detects what capabilities the kernel supports. The AppArmor package will need the patch above to force inclusion of block_suspend when it gets built on the release version of the kernel in precise, instead of the backported kernel. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
afaik isn't this a apparmor bug but a upstart bug - shouldn't we change that, or do I get this wrong?! And is there an ppa with a newer upstart? Or is it save to take the quantal packages or so? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Ray, Thomas, this is caused by mismatched Linux kernel and apparmor_parser. Newer versions of the kernel support more posix 1.e draft-style capabilities. The names and numbers as reported by the AppArmor audit messages are provided by the newer kernels. The older apparmor_parser does not support these capabilities. Upstart is not involved in this bug. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Thomas, a new upstart is not needed, apparmor needs to be updated. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
FYI, for cups in 12.04.3, this should simply be a mostly harmless error message and shouldn't affect printing. It can simply be ignored until a updated apparmor is released. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
** Patch added: absolute minimum patch to support block_suspend in this version of the parser https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+attachment/3903529/+files/foo.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
** Also affects: cups (Ubuntu) Importance: Undecided Status: New ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) ** Changed in: apparmor (Ubuntu Precise) Assignee: (unassigned) = Marc Deslauriers (mdeslaur) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
The attachment absolute minimum patch to support block_suspend in this version of the parser seems to be a patch. If it isn't, please remove the patch flag from the attachment, remove the patch tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
@margash is right, this bug is present by default in a clean install. As far as i can see the only thing that needs to happen is backport the “upstart” 1.5-0ubuntu9 package to 12.04 since by default it uses the 1.5-0ubuntu7.2 package. I don't see an easy fix at the moment? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Ow, and @margash just made a typo :) but just had a typo. But it still doesn't work by default. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
I can also confirm this on a fresh 12.04.3 installation with default kernel cat /proc/version_signature Ubuntu 3.8.0-32.47~precise1-generic 3.8.13.10 After runnig cups with aa-compain I got apparmor=ALLOWED operation=capable parent=1 profile=/usr/sbin/cupsd pid=10742 comm=cupsd pid=10742 comm=cupsd capability=36 capname=block_suspend so I did aa-logprof and now cups doesn't start any longer tail /var/log/upstart/cups.log AppArmor parser error for /etc/apparmor.d/usr.sbin.cupsd in /etc/apparmor.d/usr.sbin.cupsd at line 18: Invalid capability block_suspend. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Affects me also: cat /proc/version_signature Ubuntu 3.8.0-32.47~precise1-generic 3.8.13.10 apt-cache policy linux-generic-lts-raring linux-generic-lts-raring: Installed: 3.8.0.32.32 Candidate: 3.8.0.32.32 $ apt-cache policy cups cups: Installed: 1.5.3-0ubuntu8 Candidate: 1.5.3-0ubuntu8 apt-cache policy apparmor apparmor: Installed: 2.7.102-0ubuntu3.9 Candidate: 2.7.102-0ubuntu3.9 [ 752.270216] audit_printk_skb: 39 callbacks suppressed [ 752.270224] type=1400 audit(1381164104.927:39): apparmor=DENIED operation=capable parent=1 profile=/usr/sbin/cupsd pid=1230 comm=cupsd pid=1230 comm=cupsd capability=36 capname=block_suspend $ apparmor_parser -p /etc/apparmor.d/usr.sbin.cupsd | grep capability capability net_bind_service, capability net_bind_service, capability chown, capability fowner, capability fsetid, capability kill, capability net_bind_service, capability setgid, capability setuid, capability dac_override, capability net_bind_service, capability chown, capability fowner, capability fsetid, capability setgid, capability setuid, capability dac_override, capability dac_read_search, cat /etc/apparmor.d/local/usr.sbin.cupsd # Site-specific additions and overrides for usr.sbin.cupsd. # For more details, please see /etc/apparmor.d/local/README. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Confirmed on a fresh 12.04.3 AMD64. Cannot print due to this error in dmesg: apparmor=DENIED operation=capable parent=1 profile=/usr/sbin/cupsd pid=1046 comm=cupsd pid=1046 comm=cupsd capability=36 capname=block_suspend Adding capability block_suspend, to /usr/sbin/cupsd resulted in parser error: Invalid capability block_suspend -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
If you install 12.04.3, this bug occurs even with the default kernel now, which appears to be 3.5.0. Dovecot appears to require the block_suspend to function. At least I haven't been able to get dovecot working in enforce mode and the block_suspend was the only thing that I could see being denied. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Ok, this bug can be fixed in apparmor, so moving it back there. ** Package changed: upstart (Ubuntu Precise) = apparmor (Ubuntu Precise) ** Changed in: apparmor (Ubuntu Precise) Status: Incomplete = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
This is actually bug #1058356 but for precise with a raring kernel. The fix for precise is to adjust upstart in the same way we did for quantal's 1.5-0ubuntu9 ** Also affects: apparmor (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: apparmor (Ubuntu Saucy) Importance: Undecided Status: New ** Also affects: upstart (Ubuntu) Importance: Undecided Status: New ** No longer affects: apparmor (Ubuntu) ** No longer affects: apparmor (Ubuntu Precise) ** No longer affects: apparmor (Ubuntu Saucy) ** Changed in: upstart (Ubuntu Saucy) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Note that this fix is not optimal, but is small and the best we can do at this time. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Actually, I think I misunderstood and this is actually the inverse of bug #1058356. You have old policy and a new kernel-- but cups works ok with the denial, correct? ** Changed in: upstart (Ubuntu Precise) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1199933] Re: apparmor parser in precise does not support block_suspend capability (needed for backported kernels)
Yes. I think it is fair to characterize this as the inverse of 1058356. Basically, if one uses precise with a backported kernel, one gets an implicity deny capability block_suspend that can't be changed in all apparmor profiles, because the tools and profiles do not know about block_suspend. I'm not sure that cups really needs block_suspend, but it affects anything apparmored using precise tools and a raring kernel. I actually first saw this when after using aa-genprof on crashplan, which suggested adding an capability block_suspend line, but after adding it, the profile wouldn't load. (I'm not sure why crashplan needs to block_suspend either, though.) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1199933 Title: apparmor parser in precise does not support block_suspend capability (needed for backported kernels) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/upstart/+bug/1199933/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
