Bug #15029

Check list of backends in the usr.sbin.cups AppArmor profile (2018 edition)

Added by intrigeri 2017-12-09 08:43:04 . Updated 2018-03-14 11:09:25 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
2017-12-09
Due date:
% Done:

100%

Feature Branch:
bugfix/15029-AppArmor-cups-backends
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

1. Check that what follows is still needed: see “[apparmor] cupsd profile: list of backends”, August 2015

2. Check that the list of backends we ship in /usr/lib/cups/backend are all listed in the (patched) /etc/apparmor.d/usr.sbin.cups:

  • backends shipped in the cups-daemon package should have ixr
  • other backends should have Cx -> third_party

3. Create a ticket to do the same next year.


Subtasks


Related issues

Related to Tails - Bug #9963: cupsd AppArmor profile fails to parse on Jessie Resolved 2015-08-11
Related to Tails - Bug #15030: Update list of backends in the usr.sbin.cups AppArmor profile (2019 edition) Resolved 2017-12-09
Blocks Tails - Feature #13245: Core work 2018Q1: Foundations Team Resolved 2017-06-29
Blocked by Tails - Bug #15132: devel branch FTBFS since aufs-dkms 4.14 is in sid Resolved 2017-12-29
Blocked by Tails - Bug #15270: devel branch FTBFS since torbrowser-launcher 0.2.9 entered sid Resolved 2018-01-30

History

#1 Updated by intrigeri 2017-12-09 08:43:12

#2 Updated by intrigeri 2017-12-09 09:23:44

  • Status changed from Confirmed to In Progress

Applied in changeset commit:a1d81b1ce0d795d04d79d227baf07271fb2cf407.

#3 Updated by intrigeri 2017-12-09 10:41:14

  • related to Bug #9963: cupsd AppArmor profile fails to parse on Jessie added

#4 Updated by intrigeri 2017-12-09 11:07:31

  • % Done changed from 0 to 10
  • Feature Branch set to bugfix/15029-AppArmor-cups-backends
  • Type of work changed from Research to Code

intrigeri wrote:
> 1. Check that what follows is still needed: see “[apparmor] cupsd profile: list of backends”, August 2015

What follows is still needed but as per that thread, our patch added two useless lines, that the feature branch drops.

> 2. Check that the list of backends we ship in /usr/lib/cups/backend are all listed in the (patched) /etc/apparmor.d/usr.sbin.cups:

All this is up-to-date.

> 3. Create a ticket to do the same next year.

Bug #15030

#5 Updated by intrigeri 2017-12-09 11:08:29

  • Target version changed from Tails_3.5 to Tails_3.6

(There’s no reason to risk regressions in 3.5 for a branch that only cleans up useless stuff.)

#6 Updated by intrigeri 2017-12-09 18:30:22

  • % Done changed from 10 to 20

Jenkins is not particularly unhappy but we don’t exercise cups much there (especially since commit:15ff263293c612f69138e03f7fb2f9aedd006e23) so I’ll try using a bare metal printer with an ISO built from this branch.

#7 Updated by intrigeri 2017-12-10 08:21:04

  • Assignee changed from intrigeri to anonym
  • % Done changed from 20 to 50
  • QA Check set to Ready for QA

I could print to a JetDirect network printer using generic PostScript drivers.

#8 Updated by intrigeri 2018-01-01 16:38:33

  • blocked by deleted (Feature #13244: Core work 2017Q4: Foundations Team)

#9 Updated by intrigeri 2018-01-01 16:38:37

#10 Updated by intrigeri 2018-01-01 17:09:24

  • Assignee changed from anonym to bertagaz

#11 Updated by intrigeri 2018-01-02 10:17:42

  • blocked by Bug #15132: devel branch FTBFS since aufs-dkms 4.14 is in sid added

#12 Updated by intrigeri 2018-02-08 06:23:37

  • blocked by Bug #15270: devel branch FTBFS since torbrowser-launcher 0.2.9 entered sid added

#13 Updated by bertagaz 2018-02-20 10:48:05

  • Status changed from In Progress to Fix committed
  • Assignee deleted (bertagaz)
  • % Done changed from 50 to 100
  • QA Check changed from Ready for QA to Pass

Looks nice and easy, not so much changes. Don’t have a printer to test this change, but I trust your testings and conclusions. merged!

#14 Updated by intrigeri 2018-02-20 11:28:37

  • related to Bug #15030: Update list of backends in the usr.sbin.cups AppArmor profile (2019 edition) added

#15 Updated by bertagaz 2018-03-14 11:09:25

  • Status changed from Fix committed to Resolved