Le jeudi, 21 novembre 2019, 08.46:43 h CET intrigeri a écrit :
> Hi,
>
> Rudolf Polzer:
> > For me it is still not working, because I changed
> > /etc/cups/cups-pdf.conf
> >
> > from
> > Out ${HOME}/Transport
> > to
> > Out ${HOME}
> >
> > and get the error message
> >
> > audit[5146]: AVC apparmor="DENIED" operation="mknod"
> > profile="/usr/lib/cups/backend/cups-pdf" name="/home/rudi/home_rudi.pdf"
> > pid=5146 comm="gs" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
>
> Indeed, the fix only covers sub-directories of $HOME.
> Technically it's easy to also support this use case.
> I'm happy to implement this if the CUPS maintainers
> prefer a more lenient AppArmor confinement of cups-pdf,
> in order to improve UX in this (arguably corner) case.
As CUPS maintainer; the current situation is fine; I find letting cups-pdf
write to $HOME directly to be debatable; and the error makes sense.
Cheers,
OdyX
