Cannot print to autodiscovered printers

[Sergio Callegari]

I have issues when trying to print on autodiscovered printers.

In some cases, cups reports a "permission denied".

In other cases, the local queue is not created at all, so that it is impossible to print.

However, these printers do appear in the kde print dialog for applications like okular, etc.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: cups-browsed 1.28.15-0ubuntu1
ProcVersionSignature: Ubuntu 5.15.0-47.51-generic 5.15.46
Uname: Linux 5.15.0-47-generic x86_64
ApportVersion: 2.20.11-0ubuntu82.1
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: KDE
Date: Wed Sep 14 15:53:59 2022
EcryptfsInUse: Yes
InstallationDate: Installed on 2020-02-16 (941 days ago)
InstallationMedia: Kubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
MachineType: SCHENKER SCHENKER_SLIM14_SSL14L19
Papersize: a4
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.15.0-47-generic root=/dev/mapper/VG_NVMe-root ro quiet splash zswap.enabled=1 vt.handoff=7
SourcePackage: cups-filters
UpgradeStatus: Upgraded to jammy on 2022-06-03 (103 days ago)
dmi.bios.date: 10/02/2019
dmi.bios.release: 7.4
dmi.bios.vendor: INSYDE Corp.
dmi.bios.version: 1.07.04RTR1
dmi.board.asset.tag: Tag 12345
dmi.board.name: N141CU
dmi.board.vendor: SCHENKER
dmi.board.version: Not Applicable
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 10
dmi.chassis.vendor: Notebook
dmi.chassis.version: N/A
dmi.ec.firmware.release: 7.2
dmi.modalias: dmi:bvnINSYDECorp.:bvr1.07.04RTR1:bd10/02/2019:br7.4:efr7.2:svnSCHENKER:pnSCHENKER_SLIM14_SSL14L19:pvrNotApplicable:rvnSCHENKER:rnN141CU:rvrNotApplicable:cvnNotebook:ct10:cvrN/A:skuNotApplicable:
dmi.product.family: Not Applicable
dmi.product.name: SCHENKER_SLIM14_SSL14L19
dmi.product.sku: Not Applicable
dmi.product.version: Not Applicable
dmi.sys.vendor: SCHENKER
modified.conffile..etc.cups.cups-browsed.conf: [modified]
mtime.conffile..etc.cups.cups-browsed.conf: 2022-09-14T15:52:48.888330

[madigal (osse7)]

Also cant print with 22.10 version:
- the printer is well identified
- the queue is filled
- then the printer job is declared "stopped"

If i load Windows or an other os (Fedora) with the same hardware, printing is well done

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[madigal (osse7)]

Looks related to https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1886653

[madigal (osse7)]

Digging journalctl: lot of Apparmor "DENIED"

sept. 24 14:17:15 ub64 audit[1007]: AVC apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=1007 comm="cupsd" capability=12 capname="net_admin"
sept. 24 14:17:16 ub64 audit[1182]: AVC apparmor="DENIED" operation="connect" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1182 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=101
sept. 24 14:17:16 ub64 audit[1182]: AVC apparmor="DENIED" operation="connect" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1182 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=101
sept. 24 14:19:41 ub64 audit[4318]: AVC apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=4318 comm="snap-confine" capability=12 capname="net_admin"
sept. 24 14:19:41 ub64 audit[4318]: AVC apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=4318 comm="snap-confine" capability=38 capname="perfmon"
sept. 24 14:19:41 ub64 kernel: audit: type=1400 audit(1664021981.797:49): apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=4318 comm="snap-confine" capability=12 capname="net_admin"
sept. 24 14:19:41 ub64 kernel: audit: type=1400 audit(1664021981.797:50): apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=4318 comm="snap-confine" capability=38 capname="perfmon"
sept. 24 14:19:41 ub64 audit[4318]: AVC apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=4318 comm="snap-confine" capability=4 capname="fsetid"
sept. 24 14:19:41 ub64 kernel: audit: type=1400 audit(1664021981.825:51): apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=4318 comm="snap-confine" capability=4 capname="fsetid"
sept. 24 14:19:42 ub64 audit[4337]: AVC apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/cups/doc-root/" pid=4337 comm="5" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
sept. 24 14:19:42 ub64 kernel: audit: type=1400 audit(1664021982.073:52): apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/cups/doc-root/" pid=4337 comm="5" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
sept. 24 14:19:42 ub64 kernel: audit: type=1400 audit(1664021982.077:53): apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/gimp/2.0/" pid=4337 comm="5" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
sept. 24 14:19:42 ub64 kernel: audit: type=1400 audit(1664021982.077:54): apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/libreoffice/help/" pid=4337 comm="5" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
sept. 24 14:19:42 ub64 kernel: audit: type=1400 audit(1664021982.077:55): apparmor="DENIED" operation="open" profile="snap-update-ns.firefox" name="/var/lib/" pid=4337 comm="5" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
sept. 24 14:19:42 ub64 audit[4337]: AVC apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/gimp/2.0/" pid=4337 comm="5" requested_mask="c"...