Comment 13 for bug 147551

NoOp, AppArmor is installed by default as a new security concept for CUPS, replacing the old, ugly patches making CUPS running as a non-root user (which are not supported upstream). As cups-pdf is called by CUPS, the AppArmor profile of CUPS also applies to cups-pdf.

Martin-Éric Racine, cups-pdf is not really needed to create PDFs out of scripts. You can call all filters, like pstopdf, ps2pdf, dvipdf, convert (ImageMagick), ... directly from the command line, even the CUPS filters in /usr/lib/cups/filter/. From CUPS 1.3 on you can even use the full file conversion logic of CUPS using the "cupsfilter" command (see "man cupsfilter"). Then everything is executed with the rights of the user who calls the script and so any problems of security or file permissions are avoided.