On Sun, 03 Sep 2017 12:40:36 +0200, intrigeri wrote: > > Aug 21 16:40:22 jadzia kernel: [95510.664500] audit: type=1400 > > audit(1503326422.923:230): apparmor="DENIED" operation="capable" > > profile="/usr/sbin/cupsd" pid=21581 comm="cupsd" capability=2 > > capname="dac_read_search" > > Thanks! I cannot reproduce this myself, but I'm not surprised: I've > seen profiles that allowed dac_override start needing dac_read_search, > presumably due to a change in libc or similar. > > The attached (git format-)patch should fix this problem.
Thanks! I tried the same line after filing the bug report and before you submitted your patch (not knowing what I'm doing :)) and I can confirm that the errors are gone since then. Cheers, gregor -- .''`. https://info.comodo.priv.at/ - Debian Developer https://www.debian.org : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06 `. `' Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe `- NP: Michael Penn: Out Of Its Misery
signature.asc
Description: Digital Signature
