** Project changed: cups => ubuntu

** No longer affects: ubuntu

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to cups in Ubuntu.
https://bugs.launchpad.net/bugs/160092

Title:
  apparmor rules break filters in /usr/local

Status in “cups” package in Ubuntu:
  Fix Released

Bug description:
  Binary package hint: cupsys

  Ubuntu 7.10

  local printer attached via USB.

  On upgrading to gutsy and rebooting, printing no longer worked. My
  printer is set up with a 3rd party driver (ptouch), and the ppd file
  sets up a "foomatic-rip" line with gs output piped to "rastertoptch".
  This driver gets installed into
  /usr/local/lib/cups/filter/rastertoptch and has a symlink to it from
  /usr/local/bin.

  After bumping up cupsd's logging, I see messages like "/bin/bash:
  /usr/local/bin/rastertoptch: Permission Denied" in cups's error_log. I
  could not for the life of me figure out why it was denied, but I
  eventually got it working by copying this binary to /usr/bin.

  After wasting those hours, I have just discovered bug #131470 and now know 
that this problem is due to cupsd's "app armor" settings.
  In particular, /etc/apparmor.d/usr.sbin.cupsd does not allow any read access 
to /usr/local/lib or /usr/local/bin.

  So, this bug could be fixed by:
  1) adding read-only access to a bit more of /usr/local in cupsd's apparmor 
settings, and
  2) mentioning app-armor somewhere in /usr/share/doc/cupsys so poor sysadmins 
at least have a tiny hint as to what is happening.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/160092/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to