[GUTSY] Third-party drivers (like Turboprint) do not work due to AppArmor
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cupsys (Ubuntu) |
Fix Released
|
Medium
|
Martin Pitt |
Bug Description
Binary package hint: cupsys
Here are extract of my syslog :
Aug 21 11:57:59 satori kernel: [ 172.444000] audit(118769027
Aug 21 11:57:59 satori kernel: [ 172.448000] audit(118769027
Aug 21 11:57:59 satori kernel: [ 172.500000] audit(118769027
Aug 21 11:57:59 satori kernel: [ 172.572000] audit(118769027
Aug 21 11:57:59 satori kernel: [ 172.576000] audit(118769027
Aug 21 11:57:59 satori kernel: [ 172.616000] audit(118769027
Aug 21 11:57:59 satori kernel: [ 172.620000] audit(118769027
Aug 21 11:58:00 satori kernel: [ 173.688000] audit(118769028
Changed in cupsys: | |
status: | New → In Progress |
Changed in cupsys (Ubuntu): | |
status: | Fix Released → Fix Committed |
status: | Fix Committed → Fix Released |
It seems that the AppArmor protection breaks a lot of third-party printer drivers, especially as drivers have often extra file which can be anywhere in the system.
I suggest the following:
The filter chain is always run as non-root user (usually "lp") by CUPS, so one should perhaps better remove any protection from the filters. So AppArmor should be configured to allow everything for all sub processes running as non-root (or at least as CUPS-special user: "lp", "cupsys", ...), or it should allow everything for sub processes in /usr/lib/ cups/filter/ especially also with all their auxiliary files.