Bug #11699
Our modifications to the AppArmor profile for cupsd need updating for Stretch
100%
Description
Backends
apparmor="DENIED" operation="exec" profile="/usr/sbin/cupsd" name="/usr/lib/cups/backend/beh" pid=5446 comm="cups-deviced" requested_mask="x" denied_mask="x"
See Bug #9963 for the original reason for the patching. First try to drop these bits of our patch and see if it works better with no modification on Stretch. Worst case just update the list of backends.
Other issues
apparmor="DENIED" operation="mkdir" profile="/usr/sbin/cupsd" name="/lib/live/mount/overlay/var/.wh..wh.spool.0096/" pid=5685 comm="cupsd" requested_mask="c" denied_mask="c"
Subtasks
Related issues
Related to Tails - |
Resolved | 2015-08-11 |
History
#1 Updated by intrigeri 2016-08-23 09:21:09
- Description updated
#2 Updated by intrigeri 2016-08-23 09:21:20
- related to
Bug #9963: cupsd AppArmor profile fails to parse on Jessie added
#3 Updated by intrigeri 2016-08-23 09:40:55
- Status changed from Confirmed to In Progress
- % Done changed from 0 to 50
Should be fixed in Git. But I want to test in a clean environment after building an ISO.
#4 Updated by intrigeri 2016-08-23 10:44:49
I also need to fix apparmor="DENIED" operation="rename_dest" profile="/usr/sbin/cupsd" name="/lib/live/mount/overlay/var/spool/" pid=5481 comm="cupsd" requested_mask="wc" denied_mask="wc"
.
#5 Updated by intrigeri 2016-08-24 06:31:04
- % Done changed from 50 to 60
intrigeri wrote:
> I also need to fix apparmor="DENIED" operation="rename_dest" profile="/usr/sbin/cupsd" name="/lib/live/mount/overlay/var/spool/" pid=5481 comm="cupsd" requested_mask="wc" denied_mask="wc"
.
commit:d46147a should fix that one. One never knows so I’ll test again from an ISO that has it.
#6 Updated by intrigeri 2016-08-24 08:01:41
Works.
#7 Updated by intrigeri 2016-08-25 02:27:26
- Status changed from In Progress to Resolved
- % Done changed from 60 to 100