Comment 58 for bug 147551

Revision history for this message
Bob Blanchard (blabj) wrote :

Had this issue on hardy, found this bug - thought I'd share my solution.

In /etc/apparmor.d/usr.sbin/cupsd , here is my /usr/lib/cups/backend/cups-pdf section:

/usr/lib/cups/backend/cups-pdf {
  #include <abstractions/base>
  #include <abstractions/fonts>
  #include <abstractions/nameservice>
  #include <abstractions/user-tmp>

  capability chown,
  capability fowner,
  capability fsetid,
  capability setgid,
  capability setuid,

  /bin/dash ixr,
  /bin/bash ixr,
  /etc/papersize r,
  /etc/cups/cups-pdf.conf r,
  @{HOME}/PDF/ rw,
  @{HOME}/PDF/* rw,
  /usr/bin/gs ixr,
  /usr/lib/cups/backend/cups-pdf mr,
# /usr/lib/ghostscript/** mr,
  /usr/share/** r,
  /var/log/cups/cups-pdf_log w,
  /var/spool/cups-pdf/** rw,
  /var/tmp/ rw,
  /var/tmp/** rw,
  /var/spool/cups/ rw,
  /var/spool/cups/** rw,
}

NOTE: commented out reference to non-existent /usr/lib/ghostscript, and added /var/tmp and /var/spool/cups.

ALSO - output directory has to have perms at 700.. ie. chmod 700 ~/PDF