Fails to print due to apparmor denied connect operation for cupsd - /run/systemd/userdb/io.systemd.Machine

Bug #1964325 reported by Jean-Baptiste Lallement
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released

Bug Description

On an up to date Jammy machine, printing fails and there is the following apparmor denied message in the journal:

apparmor="DENIED" operation="connect" profile="/usr/sbin/cupsd" name="/run/systemd/userdb/io.systemd.Machine" pid=892182 comm="cupsd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0

Printing works after running aa-complain cupsd.

The printer is a driverless HP Envy 5020

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: apparmor 3.0.4-2ubuntu1
ProcVersionSignature: Ubuntu 5.15.0-18.18-generic 5.15.12
Uname: Linux 5.15.0-18-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu78
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: ubuntu:GNOME
Date: Wed Mar 9 10:25:10 2022
InstallationDate: Installed on 2020-05-31 (647 days ago)
InstallationMedia: Ubuntu 20.10 "Groovy Gorilla" - Alpha amd64 (20200527)
ProcKernelCmdline: BOOT_IMAGE=/BOOT/ubuntu_nt06gx@/vmlinuz-5.15.0-18-generic root=ZFS=rpool/ROOT/ubuntu_nt06gx ro snd-intel-dspcfg.dsp_driver=1
RebootRequiredPkgs: Error: path contained symlinks.
SourcePackage: apparmor
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Jean-Baptiste Lallement (jibel) wrote :
tags: added: rls-jj-incoming
Revision history for this message
Sebastien Bacher (seb128) wrote :

older issue that could probably be closed by the same change, bug #1894902

Revision history for this message
Alex Murray (alexmurray) wrote :

I have proposed a fix for this upstream - - once that is reviewed then we can include the fix in jammy.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 3.0.4-2ubuntu2

apparmor (3.0.4-2ubuntu2) jammy; urgency=medium

  * Update abstractions/nss-systemd to add support for systemd-machined
    (LP: #1964325)
    - d/p/u/ubuntu/abstractions-nss-systemd-Allow-access-for-systemd-ma.patch
  * Drop unnecessary libnss-systemd patch as this is already present in
    the nss-systemd abstraction
    - d/p/u/libnss-systemd.patch (dropped)

 -- Alex Murray <email address hidden> Thu, 10 Mar 2022 12:05:06 +1030

Changed in apparmor (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.