I was able to get around this by running the following
$ sudo mkdir /etc/apparmor.d/abstractions/nss-systemd.d
$ echo -e '# vim:syntax=apparmor\n\n abi <abi/3.0>,\n
@{run}/systemd/resolve/io.systemd.Resolve rw,' | sudo tee
/etc/apparmor.d/abstractions/nss-systemd.d/resolver
$ sudo systemctl reload apparmor
There may very well be better ways to do this, but this seems to work.
NB: FWIW, I believe this gives many applications the ability to use
systemd-resolved to resolve hostnames, but I can't imagine that being a
security issue.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2023630
Title:
cups-browsed - AppArmor profile missing rights for
"/run/systemd/resolve/io.systemd.Resolve"
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-browsed/+bug/2023630/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
