### Login on CUPS webintarface as domain user
# with default config
# Result: asks again for password

Jun 18 13:24:03 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:24:03 notebook audit[1184]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/189759/cmdline" pid=1184 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:24:03 notebook kernel: audit: type=1400 audit(1624015443.644:215): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/189759/cmdline" pid=1184 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:24:03 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:24:03 notebook audit[189759]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:24:03 notebook audit[189759]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:24:03 notebook audit[189759]: AVC apparmor="DENIED" operation="connect" profile="/usr/sbin/cupsd" name="/var/lib/sss/pipes/private/pam" pid=189759 comm="cupsd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Jun 18 13:24:03 notebook cupsd[189759]: pam_unix(cups:auth): authentication failure; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost  user=domainuser
Jun 18 13:24:03 notebook cupsd[189759]: pam_sss(cups:auth): Request to sssd failed. Permission denied
Jun 18 13:24:03 notebook kernel: audit: type=1400 audit(1624015443.648:216): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:24:03 notebook kernel: audit: type=1400 audit(1624015443.648:217): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:24:03 notebook kernel: audit: type=1400 audit(1624015443.648:218): apparmor="DENIED" operation="connect" profile="/usr/sbin/cupsd" name="/var/lib/sss/pipes/private/pam" pid=189759 comm="cupsd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0

### Login on CUPS as local user in Group lpadmin
# Result: success.

Jun 18 13:25:03 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:25:03 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:25:03 notebook /hpfax[193595]: [193595]: error: Failed to create /var/spool/cups/tmp/.hplip
Jun 18 13:25:23 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:25:23 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:25:25 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:25:25 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory

### Login on CUPS als local user with wrong password
# Result: asks again for password (as expected)

Jun 18 13:26:09 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:26:09 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:26:09 notebook audit[189759]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:26:09 notebook kernel: audit: type=1400 audit(1624015569.070:219): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:26:09 notebook kernel: audit: type=1400 audit(1624015569.070:220): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:26:09 notebook kernel: audit: type=1400 audit(1624015569.070:221): apparmor="DENIED" operation="connect" profile="/usr/sbin/cupsd" name="/var/lib/sss/pipes/private/pam" pid=189759 comm="cupsd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Jun 18 13:26:09 notebook audit[189759]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:26:09 notebook audit[189759]: AVC apparmor="DENIED" operation="connect" profile="/usr/sbin/cupsd" name="/var/lib/sss/pipes/private/pam" pid=189759 comm="cupsd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Jun 18 13:26:09 notebook cupsd[189759]: pam_unix(cups:auth): authentication failure; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost  user=localuser
Jun 18 13:26:09 notebook cupsd[189759]: pam_sss(cups:auth): Request to sssd failed. Permission denied

### Apply apparmor fix that worked for Bionic:
# echo '/var/lib/sss/pipes/private/pam rw,' > /etc/apparmor.d/local/usr.sbin.cupsd
# apparmor_parser -r -W -T /etc/apparmor.d/usr.sbin.cupsd

Jun 18 13:26:25 notebook audit[194804]: AVC apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=194804 comm="apparmor_parser"
Jun 18 13:26:25 notebook audit[194804]: AVC apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=194804 comm="apparmor_parser"
Jun 18 13:26:25 notebook kernel: audit: type=1400 audit(1624015585.091:222): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=194804 comm="apparmor_parser"
Jun 18 13:26:25 notebook kernel: audit: type=1400 audit(1624015585.091:223): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=194804 comm="apparmor_parser"
Jun 18 13:26:25 notebook audit[194804]: AVC apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=194804 comm="apparmor_parser"
Jun 18 13:26:25 notebook kernel: audit: type=1400 audit(1624015585.115:224): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=194804 comm="apparmor_parser"

### Login as domain user
# Result: CUPS crashes

Jun 18 13:27:00 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:27:00 notebook cupsd[189759]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 13:27:00 notebook audit[189759]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.903:225): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.903:226): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.907:227): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/189759/cmdline" pid=1185 comm="sssd_pam" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook audit[189759]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=189759 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 13:27:00 notebook audit[1185]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/189759/cmdline" pid=1185 comm="sssd_pam" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook cupsd[189759]: pam_unix(cups:auth): authentication failure; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost  user=domainuser
Jun 18 13:27:00 notebook audit[1167]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=1167 comm="sssd_be" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.911:228): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=1167 comm="sssd_be" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook audit[195318]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=195318 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.915:229): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=195318 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook audit[195318]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/run/systemd/users/101125" pid=195318 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook audit[195318]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=195318 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=101125 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.919:230): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/run/systemd/users/101125" pid=195318 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.919:231): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=195318 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=101125 ouid=0
Jun 18 13:27:00 notebook cupsd[189759]: pam_sss(cups:auth): authentication success; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost user=domainuser
Jun 18 13:27:00 notebook audit[1184]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/189759/cmdline" pid=1184 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook cupsd[189759]: Illegal status in __nss_next.
Jun 18 13:27:00 notebook audit[189759]: AVC apparmor="DENIED" operation="bind" profile="/usr/sbin/cupsd" pid=189759 comm="cupsd" family="unix" sock_type="dgram" protocol=0 requested_mask="bind" denied_mask="bind" addr="@userdb-7625b1ef65396344ef05f0a8aeda870e"
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.943:232): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/189759/cmdline" pid=1184 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 13:27:00 notebook kernel: audit: type=1400 audit(1624015620.943:233): apparmor="DENIED" operation="bind" profile="/usr/sbin/cupsd" pid=189759 comm="cupsd" family="unix" sock_type="dgram" protocol=0 requested_mask="bind" denied_mask="bind" addr="@userdb-7625b1ef65396344ef05f0a8aeda870e"
Jun 18 13:27:01 notebook systemd[1]: cups.service: Main process exited, code=dumped, status=6/ABRT
Jun 18 13:27:01 notebook systemd[1]: cups.service: Failed with result 'core-dump'.
Jun 18 13:27:01 notebook gsd-color[3016]: failed to connect to device: Failed to connect to missing device /org/freedesktop/ColorManager/devices/cups_HP_LaserJet_M1522nf_MFP
Jun 18 13:27:01 notebook systemd[1]: cups.service: Scheduled restart job, restart counter is at 4.
Jun 18 13:27:01 notebook systemd[1]: Stopping Make remote CUPS printers available locally...
Jun 18 13:28:04 notebook systemd[1]: cups-browsed.service: Succeeded.
Jun 18 13:28:04 notebook systemd[1]: Stopped Make remote CUPS printers available locally.
Jun 18 13:28:04 notebook systemd[1]: Stopped CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: cups.path: Succeeded.
Jun 18 13:28:04 notebook systemd[1]: Stopped CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: Stopping CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: Started CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: cups.socket: Succeeded.
Jun 18 13:28:04 notebook systemd[1]: Closed CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: Stopping CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: Listening on CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: Started CUPS Scheduler.
Jun 18 13:28:04 notebook systemd[1]: Started Make remote CUPS printers available locally.
Jun 18 13:28:04 notebook colord[1142]: failed to get session [pid 196260]: Keine Daten verfügbar
Jun 18 13:28:04 notebook colord[1142]: failed to get session [pid 196260]: Keine Daten verfügbar
Jun 18 13:28:04 notebook colord[1142]: failed to get session [pid 196260]: Keine Daten verfügbar
Jun 18 13:28:05 notebook colord[1142]: failed to get session [pid 196260]: Keine Daten verfügbar


### Apply second fix (c.f. https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1890858)
# echo 'unix (bind) type=dgram addr=@userdb-*,' >> /etc/apparmor.d/local/usr.sbin.cupsd
# apparmor_parser -r -W -T /etc/apparmor.d/usr.sbin.cupsd

Jun 18 14:06:28 notebook audit[232035]: AVC apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=232035 comm="apparmor_parser"
Jun 18 14:06:28 notebook kernel: audit: type=1400 audit(1624017988.166:262): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=232035 comm="apparmor_parser"
Jun 18 14:06:28 notebook audit[232035]: AVC apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=232035 comm="apparmor_parser"
Jun 18 14:06:28 notebook kernel: audit: type=1400 audit(1624017988.170:263): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=232035 comm="apparmor_parser"
Jun 18 14:06:28 notebook audit[232035]: AVC apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=232035 comm="apparmor_parser"
Jun 18 14:06:28 notebook kernel: audit: type=1400 audit(1624017988.198:264): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=232035 comm="apparmor_parser"

### Login as domain user
# Result: works as expected

Jun 18 14:07:20 notebook cupsd[230964]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 14:07:20 notebook cupsd[230964]: pam_unix(cups:auth): Couldn't open /etc/securetty: No such file or directory
Jun 18 14:07:20 notebook audit[230964]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[230964]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[1185]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/230964/cmdline" pid=1185 comm="sssd_pam" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook cupsd[230964]: pam_unix(cups:auth): authentication failure; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost  user=domainuser
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.467:265): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.467:266): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.467:267): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/230964/cmdline" pid=1185 comm="sssd_pam" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[1167]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=1167 comm="sssd_be" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[232917]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=232917 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[232917]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/run/systemd/users/101125" pid=232917 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.475:268): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=1167 comm="sssd_be" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.475:269): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=232917 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.475:270): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/run/systemd/users/101125" pid=232917 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[232917]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=232917 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=101125 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.479:271): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/krb5.conf.local" pid=232917 comm="krb5_child" requested_mask="r" denied_mask="r" fsuid=101125 ouid=0
Jun 18 14:07:20 notebook cupsd[230964]: pam_sss(cups:auth): authentication success; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost user=domainuser
Jun 18 14:07:20 notebook audit[1184]: AVC apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/230964/cmdline" pid=1184 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.503:272): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/230964/cmdline" pid=1184 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[230964]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.535:273): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook audit[230964]: AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook kernel: audit: type=1400 audit(1624018040.555:274): apparmor="DENIED" operation="file_lock" profile="/usr/sbin/cupsd" name="/run/utmp" pid=230964 comm="cupsd" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Jun 18 14:07:20 notebook /hpfax[232927]: [232927]: error: Failed to create /var/spool/cups/tmp/.hplip