I'm afraid I can't. I subscribed Jamie and Tyler as our resident AppArmor experts.
> requested_mask="c" denied_mask="c"
I'm afraid I don't know what "c" is, it's not documented in man 5 apparmor.d. Bram seems to suggest it's "mknod", but why would that apply to /var/cache/samba/gencache.tdb? That's certainly a regular file, not a device node. If cups were actually trying to mknod() something there, that'd be a bug.
I'm afraid I can't. I subscribed Jamie and Tyler as our resident AppArmor experts.
> requested_mask="c" denied_mask="c"
I'm afraid I don't know what "c" is, it's not documented in man 5 apparmor.d. Bram seems to suggest it's "mknod", but why would that apply to /var/cache/ samba/gencache. tdb? That's certainly a regular file, not a device node. If cups were actually trying to mknod() something there, that'd be a bug.