Comment 7 for bug 139665

Revision history for this message
Robert Di Gioia (digioiar) wrote :

Hi. Since upgrade from fiesty to gutsy, I've been getting apparmor messages when I print. My printer is connected to an XP box, so I'm using samba.

Dec 15 17:20:51 gandalf kernel: [26194.092000] audit(1197757250.417:11): type=1503 operation="file_mmap" requested_mask="mr" denied_mask="m" name="/usr/share/samba/lowcase.dat" pid=7208 profile="/usr/sbin/cupsd"
Dec 15 17:20:51 gandalf kernel: [26194.160000] audit(1197757250.417:12): type=1503 operation="file_mmap" requested_mask="mr" denied_mask="m" name="/usr/share/samba/valid.dat" pid=7208 profile="/usr/sbin/cupsd"

After reading up on apparmor, and reviewing /etc/apparmor.d/usr.sbin.cupsd, and noticing that there is a samba profile in the /etc/apparmor.d/abstractions directory, I tried adding the following line to /etc/apparmor.d/usr.sbin.cupsd, and it no longer generates messages when printing. I added it to the end of the #include section.

#include <abstractions/samba>

My thought is that it may be good to add samba to the apparmor cups profile on a go-forward basis to keep syslog noise down.

Hope that this is of some help.