Comment 4 for bug 1187970

Re John Johansen's suggestion:

I did it with reboot, but dmesg still reports denial, see below:

[ 104.569090] audit_printk_skb: 24 callbacks suppressed
[ 104.569100] type=1400 audit(1370659781.774:26): apparmor="DENIED" operation="exec" parent=831 profile="/usr/sbin/cupsd" name="/usr/local/lexmark/08zero/bin/printdriver" pid=1911 comm="cupsd" requested_mask="x" denied_mask="x" fsuid=7 ouid=0

Excerpt from the modified usr/sbin.cupsd file after reboot and trying the print operation:

/usr/local/** rm,
  /usr/local/lib/cups/** rix,
  /usr/local/lexmark/08zero/bin/printdriver rix,
  /usr/share/** r,
  /{,var/}run/** rm,

Btw, I tried before reading your suggestion to modify the file based on the Brother entry, such as

/usr/lexinjkjet/** Ux,
/usr/local/lexmark/** Ux,

because /usr/lexinkjet/ has the 08zero directory (symlinked from /usr/local/lexmark) containing the "printdriver" file and a lib directory housing so files. The /usr/lexinkjet has an etc directory housing various ppd files for various other lexmark printers as well.

This did not work either.

Something else in the apparmor scheme still denies execution.

Janos