Bug #11699

Our modifications to the AppArmor profile for cupsd need updating for Stretch

Added by intrigeri 2016-08-23 09:17:07 . Updated 2016-08-25 02:27:26 .

Status:
Resolved
Priority:
Normal
Assignee:
intrigeri
Category:
Hardware support
Target version:
Start date:
2016-08-23
Due date:
% Done:

100%

Feature Branch:
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

Backends

apparmor="DENIED" operation="exec" profile="/usr/sbin/cupsd" name="/usr/lib/cups/backend/beh" pid=5446 comm="cups-deviced" requested_mask="x" denied_mask="x"

See Bug #9963 for the original reason for the patching. First try to drop these bits of our patch and see if it works better with no modification on Stretch. Worst case just update the list of backends.

Other issues

apparmor="DENIED" operation="mkdir" profile="/usr/sbin/cupsd" name="/lib/live/mount/overlay/var/.wh..wh.spool.0096/" pid=5685 comm="cupsd" requested_mask="c" denied_mask="c"


Subtasks


Related issues

Related to Tails - Bug #9963: cupsd AppArmor profile fails to parse on Jessie Resolved 2015-08-11

History

#1 Updated by intrigeri 2016-08-23 09:21:09

  • Description updated

#2 Updated by intrigeri 2016-08-23 09:21:20

  • related to Bug #9963: cupsd AppArmor profile fails to parse on Jessie added

#3 Updated by intrigeri 2016-08-23 09:40:55

  • Status changed from Confirmed to In Progress
  • % Done changed from 0 to 50

Should be fixed in Git. But I want to test in a clean environment after building an ISO.

#4 Updated by intrigeri 2016-08-23 10:44:49

I also need to fix apparmor="DENIED" operation="rename_dest" profile="/usr/sbin/cupsd" name="/lib/live/mount/overlay/var/spool/" pid=5481 comm="cupsd" requested_mask="wc" denied_mask="wc".

#5 Updated by intrigeri 2016-08-24 06:31:04

  • % Done changed from 50 to 60

intrigeri wrote:
> I also need to fix apparmor="DENIED" operation="rename_dest" profile="/usr/sbin/cupsd" name="/lib/live/mount/overlay/var/spool/" pid=5481 comm="cupsd" requested_mask="wc" denied_mask="wc".

commit:d46147a should fix that one. One never knows so I’ll test again from an ISO that has it.

#6 Updated by intrigeri 2016-08-24 08:01:41

Works.

#7 Updated by intrigeri 2016-08-25 02:27:26

  • Status changed from In Progress to Resolved
  • % Done changed from 60 to 100