Before that I see entries that look like this:
Oct 4 12:50:54 golem4 kernel: [151422.393607] audit: type=1400 audit(1507110654.087:74): apparmor="DENIED" operation="open" profile="/usr/sbin/cupsd" name="/proc/2399/cmdline" pid=2399 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Oct 4 12:50:54 golem4 kernel: [151422.393706] cupsd[2399]: segfault at 0 ip 00007fb9ba1f7715 sp 00007ffce931b968 error 4 in libc-2.24.so[7fb9ba0aa000+1be000]
Oct 4 12:50:54 golem4 systemd[1]: cups.service: Main process exited, code=dumped, status=11/SEGV
Ok really strange, after running once with aa-complain, it seems to solve the problem.
In syslog I see this:
golem4 kernel: [188942.996377] audit: type=1400 audit(150714817 4.867:125) : apparmor="ALLOWED" operation="open" profile= "/usr/sbin/ cupsd" name="/ proc/20273/ cmdline" pid=20273 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Before that I see entries that look like this: 4.087:74) : apparmor="DENIED" operation="open" profile= "/usr/sbin/ cupsd" name="/ proc/2399/ cmdline" pid=2399 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 24.so[7fb9ba0aa 000+1be000]
Oct 4 12:50:54 golem4 kernel: [151422.393607] audit: type=1400 audit(150711065
Oct 4 12:50:54 golem4 kernel: [151422.393706] cupsd[2399]: segfault at 0 ip 00007fb9ba1f7715 sp 00007ffce931b968 error 4 in libc-2.
Oct 4 12:50:54 golem4 systemd[1]: cups.service: Main process exited, code=dumped, status=11/SEGV
Note it says apparmor="DENIED"