Example:
Jul 14 11:27:50 localhost kernel: [ 8660.404355] type=1400 audit(1310635670.401:12064): apparmor="DENIED" operation="chown" parent=1 profile="/usr/sbin/cupsd" name="/run/cups/" pid=6276 comm="cupsd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Jul 14 11:27:50 localhost kernel: [ 8660.404469] type=1400 audit(1310635670.401:12065): apparmor="DENIED" operation="chown" parent=1 profile="/usr/sbin/cupsd" name="/run/cups/certs/" pid=6276 comm="cupsd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Jul 14 11:27:50 localhost kernel: [ 8660.443356] type=1400 audit(1310635670.441:12066): apparmor="DENIED" operation="mknod" parent=1 profile="/usr/sbin/cupsd" name="/run/cups/printcap" pid=6276 comm="cupsd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 Jul 14 11:27:50 localhost kernel: [ 8660.445231] type=1400 audit(1310635670.441:12067): apparmor="DENIED" operation="mknod" parent=1 profile="/usr/sbin/cupsd" name="/run/cups/cups.sock" pid=6276 comm="cupsd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 Jul 14 11:27:50 localhost kernel: [ 8660.445362] type=1400 audit(1310635670.441:12068): apparmor="DENIED" operation="mknod" parent=1 profile="/usr/sbin/cupsd" name="/run/cups/cupsd.pid" pid=6276 comm="cupsd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Example:
Jul 14 11:27:50 localhost kernel: [ 8660.404355] type=1400 audit(131063567 0.401:12064) : apparmor="DENIED" operation="chown" parent=1 profile= "/usr/sbin/ cupsd" name="/run/cups/" pid=6276 comm="cupsd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 0.401:12065) : apparmor="DENIED" operation="chown" parent=1 profile= "/usr/sbin/ cupsd" name="/ run/cups/ certs/" pid=6276 comm="cupsd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 0.441:12066) : apparmor="DENIED" operation="mknod" parent=1 profile= "/usr/sbin/ cupsd" name="/ run/cups/ printcap" pid=6276 comm="cupsd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 0.441:12067) : apparmor="DENIED" operation="mknod" parent=1 profile= "/usr/sbin/ cupsd" name="/ run/cups/ cups.sock" pid=6276 comm="cupsd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 0.441:12068) : apparmor="DENIED" operation="mknod" parent=1 profile= "/usr/sbin/ cupsd" name="/ run/cups/ cupsd.pid" pid=6276 comm="cupsd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Jul 14 11:27:50 localhost kernel: [ 8660.404469] type=1400 audit(131063567
Jul 14 11:27:50 localhost kernel: [ 8660.443356] type=1400 audit(131063567
Jul 14 11:27:50 localhost kernel: [ 8660.445231] type=1400 audit(131063567
Jul 14 11:27:50 localhost kernel: [ 8660.445362] type=1400 audit(131063567