cupsd apparmor denied R on /proc/sys/vm/overcommit_memory

Bug #1117416 reported by Chad Miller
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
cups (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Printing from chromium-browser, got apparmor warning.

[430907.703574] type=1400 audit(1360164047.057:1644): apparmor="DENIED" operation="open" parent=19538 profile="/usr/sbin/cupsd" name="/proc/sys/vm/overcommit_memory" pid=24558 comm="usb" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

cups 1.6.1-1ubuntu1 on Raring

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

pitti, can you have a look into this?

affects: cupsys (Ubuntu) → cups (Ubuntu)
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in cups (Ubuntu):
status: New → Confirmed
Revision history for this message
martin suchanek (martin-suc) wrote :

in my case it is bind9 on Raring:

egrep 'apparmor="DENIED' /var/log/kern.log
Mar 24 10:47:16 kernel: [ 38.118494] type=1400 audit(1364122036.063:13023): apparmor="DENIED" operation="open" parent=7830 profile="/usr/sbin/named" name="/proc/sys/vm/overcommit_memory" pid=7839 comm="named" requested_mask="r" denied_mask="r" fsuid=129 ouid=0
Mar 25 09:17:34 kernel: [ 39.598513] type=1400 audit(1364203054.575:11791): apparmor="DENIED" operation="open" parent=8253 profile="/usr/sbin/named" name="/proc/sys/vm/overcommit_memory" pid=8262 comm="named" requested_mask="r" denied_mask="r" fsuid=129 ouid=0

apt-cache policy bind9
bind9:
  Installed: 1:9.9.2.dfsg.P1-2
  Candidate: 1:9.9.2.dfsg.P1-2
  Version table:
 *** 1:9.9.2.dfsg.P1-2 0
        500 http://localhost/ubuntu/ raring/main amd64 Packages
        500 http://archive.ubuntu.com/ubuntu/ raring/main amd64 Packages
        100 /var/lib/dpkg/status

Revision history for this message
martin suchanek (martin-suc) wrote :

could please somebody help if the workarround is something like:
put in /etc/apparmor.d/usr.sbin.named
/proc/sys/vm/overcommit_memory r,

thank you,

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.