I already did the /usr/local/lexmark thing, no difference.

Here is an excerpt from my usr.sbin.cupsd

...
  # FIXME: no policy ATM for hplip and Brother drivers
  /usr/bin/hpijs Ux,
  /usr/Brother/** Ux,
## JGK 6/9/13 begin
  /usr/lexinkjet/** Ux,
  /usr/local/lexmark/** Ux,
## JGK 6/9/13 end

  # Kerberos authentication
...
Note: I think we need both lexinkjet and lexmard dierctories because the way 
lexmark installs files and symlinks within. These two directories have printer 
setups for an entire family of lexmark printers.

(A) Here is the cache after boot today, print producing denial:

janos@Andraslinux:~$ ls -l /etc/apparmor.d/cache/usr.sbin.cupsd
-rw------- 1 root root 87010 Jun  9 09:35 /etc/apparmor.d/cache/usr.sbin.cupsd
janos@Andraslinux:~$ sudo  md5sum /etc/apparmor.d/cache/usr.sbin.cupsd
[sudo] password for janos: 
04e342575436f1477a3f292e4043938a  /etc/apparmor.d/cache/usr.sbin.cupsd

(B) Here is the cache after applying apparmor_parser command:

janos@Andraslinux:~$ sudo apparmor_parser -vTWr /etc/apparmor.d/usr.sbin.cupsd
Warning from /etc/apparmor.d/usr.sbin.cupsd (/etc/apparmor.d/usr.sbin.cupsd 
line 180): profile /usr/lib/cups/backend/cups-pdf network rules not enforced
Replacement succeeded for "/usr/lib/cups/backend/cups-pdf".
Warning from /etc/apparmor.d/usr.sbin.cupsd (/etc/apparmor.d/usr.sbin.cupsd 
line 180): profile /usr/sbin/cupsd network rules not enforced
Replacement succeeded for "/usr/sbin/cupsd".
janos@Andraslinux:~$ ls -l /etc/apparmor.d/cache/usr.sbin.cupsd
-rw------- 1 root root 87010 Jun 10 17:51 /etc/apparmor.d/cache/usr.sbin.cupsd
janos@Andraslinux:~$ sudo  md5sum /etc/apparmor.d/cache/usr.sbin.cupsd
04e342575436f1477a3f292e4043938a  /etc/apparmor.d/cache/usr.sbin.cupsd

printer came to life, but then error and dmesg segfault

(C) After reboot:

janos@Andraslinux:~$ ls -l /etc/apparmor.d/cache/usr.sbin.cupsd
-rw------- 1 root root 87010 Jun 10 17:51 /etc/apparmor.d/cache/usr.sbin.cupsd
janos@Andraslinux:~$ sudo  md5sum /etc/apparmor.d/cache/usr.sbin.cupsd
[sudo] password for janos: 
04e342575436f1477a3f292e4043938a  /etc/apparmor.d/cache/usr.sbin.cupsd

printer denied

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1187970

Title:
  apparmor prevents custom printer driver from executing

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1187970/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to