Ubuntu
apparmor package

  1. Bug #1187970
  2. Comment #9

Comment 9 for bug 1187970

Revision history for this message
Janos G. Komaromi (jankom) wrote :

I already did the /usr/local/lexmark thing, no difference.

Here is an excerpt from my usr.sbin.cupsd

...
  # FIXME: no policy ATM for hplip and Brother drivers
  /usr/bin/hpijs Ux,
  /usr/Brother/** Ux,
## JGK 6/9/13 begin
  /usr/lexinkjet/** Ux,
  /usr/local/lexmark/** Ux,
## JGK 6/9/13 end

  # Kerberos authentication
...
Note: I think we need both lexinkjet and lexmard dierctories because the way lexmark installs files and symlinks within. These two directories have printer setups for an entire family of lexmark printers.

(A) Here is the cache after boot today, print producing denial:

janos@Andraslinux:~$ ls -l /etc/apparmor.d/cache/usr.sbin.cupsd
-rw------- 1 root root 87010 Jun 9 09:35 /etc/apparmor.d/cache/usr.sbin.cupsd
janos@Andraslinux:~$ sudo md5sum /etc/apparmor.d/cache/usr.sbin.cupsd
[sudo] password for janos:
04e342575436f1477a3f292e4043938a /etc/apparmor.d/cache/usr.sbin.cupsd

(B) Here is the cache after applying apparmor_parser command:

janos@Andraslinux:~$ sudo apparmor_parser -vTWr /etc/apparmor.d/usr.sbin.cupsd
Warning from /etc/apparmor.d/usr.sbin.cupsd (/etc/apparmor.d/usr.sbin.cupsd line 180): profile /usr/lib/cups/backend/cups-pdf network rules not enforced
Replacement succeeded for "/usr/lib/cups/backend/cups-pdf".
Warning from /etc/apparmor.d/usr.sbin.cupsd (/etc/apparmor.d/usr.sbin.cupsd line 180): profile /usr/sbin/cupsd network rules not enforced
Replacement succeeded for "/usr/sbin/cupsd".
janos@Andraslinux:~$ ls -l /etc/apparmor.d/cache/usr.sbin.cupsd
-rw------- 1 root root 87010 Jun 10 17:51 /etc/apparmor.d/cache/usr.sbin.cupsd
janos@Andraslinux:~$ sudo md5sum /etc/apparmor.d/cache/usr.sbin.cupsd
04e342575436f1477a3f292e4043938a /etc/apparmor.d/cache/usr.sbin.cupsd

printer came to life, but then error and dmesg segfault

(C) After reboot:

janos@Andraslinux:~$ ls -l /etc/apparmor.d/cache/usr.sbin.cupsd
-rw------- 1 root root 87010 Jun 10 17:51 /etc/apparmor.d/cache/usr.sbin.cupsd
janos@Andraslinux:~$ sudo md5sum /etc/apparmor.d/cache/usr.sbin.cupsd
[sudo] password for janos:
04e342575436f1477a3f292e4043938a /etc/apparmor.d/cache/usr.sbin.cupsd

printer denied