[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-12-06 Thread Launchpad Bug Tracker
[Expired for cups (Ubuntu) because there has been no activity for 60 days.] ** Changed in: cups (Ubuntu) Status: Incomplete = Expired -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cups in Ubuntu.

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-07 Thread Christian
Okay, step by step: cups-pdf policy has: #include abstractions/nameservice yes /etc/apparmor.d/abstractions/nameservice has: #include abstractions/winbind yes /etc/apparmor.d/abstractions/winbind has: /var/{lib,run}/samba/winbindd_privileged/pipe rw, yes I am using

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-06 Thread Jamie Strandboge
Christian, yes, add this to your profile (in the cups-pdf section): /run/samba/winbindd/pipe rw, then do this: $ sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cups in

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-06 Thread Jamie Strandboge
Can you perform the above and confirm if it fixes it for you? Also, the cups-pdf policy has: #include abstractions/nameservice and /etc/apparmor.d/abstractions/nameservice has: #include abstractions/winbind and /etc/apparmor.d/abstractions/winbind has:

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-04 Thread Christian
@Jamie: To get output from grep DEN /var/log/syslog I set to enforce mode: 3x Oct 4 11:41:31 fs kernel: [135831.687728] type=1400 audit(1412415691.115:6372889): apparmor=DENIED operation=connect profile=/usr/lib/cups/backend/cups-pdf name=/run/samba/winbindd/pipe pid=19253 comm=cups-pdf

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-03 Thread Jamie Strandboge
Can you paste the output of: $ grep DEN /var/log/syslog at the time of the denial? ** Package changed: cups-pdf (Ubuntu) = cups (Ubuntu) ** Changed in: cups (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages,

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-03 Thread Seth Arnold
Since you put this into complain mode, there may be more entries needed that might have been logged with ALLOWED -- can you grep for those, too, please? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cups in Ubuntu.