| 2007-08-21 10:01:00 |
Patrice Vetsel |
bug |
|
|
added bug |
| 2007-08-21 21:19:41 |
Till Kamppeter |
cupsys: importance |
Undecided |
Medium |
|
| 2007-08-21 21:19:41 |
Till Kamppeter |
cupsys: assignee |
|
pitti |
|
| 2007-08-21 21:19:41 |
Till Kamppeter |
cupsys: statusexplanation |
|
It seems that the AppArmor protection breaks a lot of third-party printer drivers, especially as drivers have often extra file which can be anywhere in the system.
I suggest the following:
The filter chain is always run as non-root user (usually "lp") by CUPS, so one should perhaps better remove any protection from the filters. So AppArmor should be configured to allow everything for all sub processes running as non-root (or at least as CUPS-special user: "lp", "cupsys", ...), or it should allow everything for sub processes in /usr/lib/cups/filter/ especially also with all their auxiliary files.
|
|
| 2007-08-21 21:20:33 |
Till Kamppeter |
title |
[GUTSY] Turboprint don't work due to apparmor |
[GUTSY] Third-party drivers (like Turboprint) do not work due to AppArmor |
|
| 2007-08-22 06:15:14 |
Martin Pitt |
cupsys: status |
New |
In Progress |
|
| 2007-08-22 06:15:14 |
Martin Pitt |
cupsys: statusexplanation |
It seems that the AppArmor protection breaks a lot of third-party printer drivers, especially as drivers have often extra file which can be anywhere in the system.
I suggest the following:
The filter chain is always run as non-root user (usually "lp") by CUPS, so one should perhaps better remove any protection from the filters. So AppArmor should be configured to allow everything for all sub processes running as non-root (or at least as CUPS-special user: "lp", "cupsys", ...), or it should allow everything for sub processes in /usr/lib/cups/filter/ especially also with all their auxiliary files.
|
|
|
| 2007-09-12 13:35:25 |
Martin Pitt |
cupsys: status |
In Progress |
Fix Committed |
|
| 2007-09-12 14:00:15 |
Martin Pitt |
cupsys: status |
Fix Committed |
Fix Released |
|
| 2007-09-19 08:47:18 |
Xavier ALT |
bug |
|
|
added attachment 'usr.sbin.cupsd.patch' (apparmor profile for cnij_usb backend) |
| 2007-10-30 23:50:37 |
Kevin Cole |
bug |
|
|
added subscriber Kevin Cole |
| 2010-03-03 16:16:46 |
abigailcarr1@googlemail.com |
cupsys (Ubuntu): status |
Fix Released |
Fix Committed |
|
| 2010-03-03 16:16:59 |
abigailcarr1@googlemail.com |
cupsys (Ubuntu): status |
Fix Committed |
Fix Released |
|
