Bug #15030

Update list of backends in the usr.sbin.cups AppArmor profile (2019 edition)

Added by intrigeri 2017-12-09 11:04:52 . Updated 2019-05-24 11:07:48 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Tails_4.0
Start date:
2017-12-09
Due date:
% Done:

100%

Feature Branch:
bugfix/15030-update-cups-apparmor-profile
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

1. Check that the list of backends we ship in /usr/lib/cups/backend are all listed in the (patched) /etc/apparmor.d/usr.sbin.cups:

  • backends shipped in the cups-daemon package should have ixr
  • other backends should have Cx -> third_party

2. Create a ticket to do the same next year.

Subtasks

Related issues

Related to Tails - Bug #9963: cupsd AppArmor profile fails to parse on Jessie Resolved 2015-08-11
Related to Tails - Bug #15029: Check list of backends in the usr.sbin.cups AppArmor profile (2018 edition) Resolved 2017-12-09
Related to Tails - Bug #16745: Update the list of backends in the usr.sbin.cups AppArmor profile (Bullseye edition) Confirmed
Blocks Tails - Feature #16209: Core work: Foundations Team Confirmed

History

#1 Updated by intrigeri 2017-12-09 11:05:36

This is not on our 2019 roadmap but it shall be done in 2019 as per updated Foundations Team mission. Once we have a target version in 2019 I’ll move it there.

#2 Updated by intrigeri 2017-12-09 11:05:46

  • related to Bug #9963: cupsd AppArmor profile fails to parse on Jessie added

#3 Updated by intrigeri 2018-02-20 11:28:36

  • related to Bug #15029: Check list of backends in the usr.sbin.cups AppArmor profile (2018 edition) added

#4 Updated by intrigeri 2019-03-17 08:56:18

  • Target version changed from 2019 to Tails_3.14

#5 Updated by intrigeri 2019-03-17 08:56:30

#6 Updated by intrigeri 2019-03-24 06:21:46

I’ll do that early April, directly on feature/buster.

#7 Updated by intrigeri 2019-04-05 13:17:16

  • Target version changed from Tails_3.14 to Tails_4.0

#8 Updated by intrigeri 2019-05-23 11:18:55

  • related to Bug #16745: Update the list of backends in the usr.sbin.cups AppArmor profile (Bullseye edition) added

#9 Updated by intrigeri 2019-05-23 11:32:09

  • Subject changed from Check list of backends in the usr.sbin.cups AppArmor profile (2019 edition) to Update list of backends in the usr.sbin.cups AppArmor profile (2019 edition)
  • Status changed from Confirmed to In Progress
  • Type of work changed from Research to Code

intrigeri wrote:
> 1. Check that the list of backends we ship in /usr/lib/cups/backend are all listed in the (patched) /etc/apparmor.d/usr.sbin.cups:
>
> * backends shipped in the cups-daemon package should have ixr
> * other backends should have Cx -> third_party

Missing: cups-brf, driverless, gutenprint53+usb.

> 2. Create a ticket to do the same next year.

Bug #16745 (I’ve switched to per-Debian-cycle check instead of yearly, seems good enough)

#10 Updated by intrigeri 2019-05-23 11:43:30

  • Feature Branch set to bugfix/15030-update-cups-apparmor-profile

#11 Updated by intrigeri 2019-05-23 15:19:03

  • Assignee deleted (intrigeri)
  • QA Check set to Ready for QA

#12 Updated by anonym 2019-05-24 08:36:03

  • Assignee set to anonym

#13 Updated by anonym 2019-05-24 10:03:26

  • Status changed from In Progress to Fix committed
  • Assignee deleted (anonym)
  • % Done changed from 0 to 100
  • QA Check changed from Ready for QA to Pass

LGTM!

#14 Updated by intrigeri 2019-05-24 11:07:48

  • Status changed from Fix committed to Resolved