[Bug 1801626] [NEW] secureboot-db installs new vars without explict owner permission

2018-11-04 Thread Patrick Hibbs
Public bug reported: The latest secureboot-db package pulled via an apt-get upgrade installed several DBX entries into my system's secure boot EFI vars without explicit permission. This system is in setup mode, and it doesn't even have a PK installed. Installing DBX entries should not happen in

[Bug 1698693] Re: cups-pdf blocked by apparmor

2018-10-07 Thread Patrick Hibbs
Ooops. Ignore the previous post. Those were the wrong instructions. These are the correct ones: 1. Install fresh copy of Ubuntu. 2. Install printer-driver-cups-pdf. 3. Change cups-pdf's output directory in /etc/cups/cups-pdf.conf to some directory outside of the user's home directory, and that

[Bug 1698693] Re: cups-pdf blocked by apparmor

2018-10-07 Thread Patrick Hibbs
1. Install fresh copy of Ubuntu. 2. Make sure ~/PDF does not exist. 3. Install printer-driver-cups-pdf. 4. Attempt to print using CUPS PDF. 5. Notice the DENIED error in dmesg, and the lack of a ~/PDF directory. 6. Notice that cups-pdf lacks an apparmor profile of it's own and is stored

[Bug 1698693] Re: cups-pdf blocked by apparmor

2018-09-08 Thread Patrick Hibbs
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1675503 <- That has nothing to do with this bug. https://bugs.launchpad.net/ubuntu/+source/cups-pdf/+bug/1166786 <- Sort of, that describes the issue and admits the issue's existance, but does not actually fix it. What I mean by that is the

[Bug 1698693] Re: cups-pdf blocked by apparmor

2018-09-06 Thread Patrick Hibbs
I'm using Bionic. (18.04.1 LTS) x64 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693 Title: cups-pdf blocked by apparmor To manage notifications about this bug go to:

[Bug 1698693] Re: cups-pdf blocked by apparmor

2018-09-01 Thread Patrick Hibbs
Hmm... Access Denied, should I resubmit using a different login? Also the lack of an include directive for /usr/lib/cups/backend/cups-pdf in /etc/apparmor.d/usr.sbin.cupsd to allow using a different path for pdf output is still an issue. -- You received this bug notification because you are a

[Bug 1698693] ProcInterrupts.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "ProcInterrupts.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183614/+files/ProcInterrupts.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1698693] ProcModules.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "ProcModules.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183615/+files/ProcModules.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693

[Bug 1698693] ProcEnviron.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "ProcEnviron.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183613/+files/ProcEnviron.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693

[Bug 1698693] UdevDb.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "UdevDb.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183616/+files/UdevDb.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693 Title:

[Bug 1698693] ProcCpuinfo.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "ProcCpuinfo.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183611/+files/ProcCpuinfo.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693

[Bug 1698693] Lsusb.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "Lsusb.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183609/+files/Lsusb.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693 Title:

[Bug 1698693] Dependencies.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "Dependencies.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183605/+files/Dependencies.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1698693] KernLog.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "KernLog.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183606/+files/KernLog.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693 Title:

[Bug 1698693] PrintingPackages.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "PrintingPackages.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183610/+files/PrintingPackages.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1698693] Locale.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "Locale.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183607/+files/Locale.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693 Title:

[Bug 1698693] ProcCpuinfoMinimal.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "ProcCpuinfoMinimal.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183612/+files/ProcCpuinfoMinimal.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1698693] Re: cups-pdf blocked by apparmor

2018-09-01 Thread Patrick Hibbs
apport information ** Tags added: apparmor apport-collected bionic ** Description changed: cups-pdf cannot create the ~/PDF directory if it does not exist and fails with no indication to the user. It should however be pointed out that cups-pdf allows the system administrator to

[Bug 1698693] Lspci.txt

2018-09-01 Thread Patrick Hibbs
apport information ** Attachment added: "Lspci.txt" https://bugs.launchpad.net/bugs/1698693/+attachment/5183608/+files/Lspci.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698693 Title:

[Bug 1613050] Re: SAMBA Authentication fails with CUPS print job

2017-06-18 Thread Patrick Hibbs
For starters you have something wrong with your TLS cert config on the client: Unable to encrypt connection: The TLS connection was non- properly terminated. You need to import the cups server's certificate into /usr/local/share /ca-certificates and rerun update-ca-certificates on

[Bug 1698693] [NEW] cups-pdf blocked by apparmor

2017-06-18 Thread Patrick Hibbs
Public bug reported: cups-pdf cannot create the ~/PDF directory if it does not exist and fails with no indication to the user. It should however be pointed out that cups-pdf allows the system administrator to change it's output directory by changing the Out key in /etc/cups/cups-pdf.conf. As

[Bug 1658707] Re: ttf-mscorefonts-installer drop-priv warnings and download errors during install

2017-03-12 Thread Patrick Hibbs
Although the request was for Yakketty, it also has the the bug in Xenial. I did try to manually download arial32.exe and andale32.exe using wget and then copying them to /var/lib/update-notifier/package- data-downloads/partial. Doing so allowed the reconfigure to succeed. sudo apt show

[Bug 975973] Re: Please integrate Samba 4 with bind9 package

2016-12-21 Thread Patrick Hibbs
Apparmor is also blocking read access from named to /var/lib/samba/private/dns.keytab. [40953.694755] audit: type=1400 audit(1482362368.332:17): apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/var/lib/samba/private/dns.keytab" pid=5334 comm="named" requested_mask="r"

[Bug 975973] Re: Please integrate Samba 4 with bind9 package

2016-12-21 Thread Patrick Hibbs
As this seems the best place to put it, samba version 4.3.11+dfsg- 0ubuntu0.16.04.1 adds a new file /var/lib/samba/private/named.conf.update to bind's config when using the BIND9_FLATFILE config. According to the sample named.conf generated by samba's domain provisioning command, it's an empty