** Project changed: cups => ubuntu ** No longer affects: ubuntu
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/160092 Title: apparmor rules break filters in /usr/local Status in “cups” package in Ubuntu: Fix Released Bug description: Binary package hint: cupsys Ubuntu 7.10 local printer attached via USB. On upgrading to gutsy and rebooting, printing no longer worked. My printer is set up with a 3rd party driver (ptouch), and the ppd file sets up a "foomatic-rip" line with gs output piped to "rastertoptch". This driver gets installed into /usr/local/lib/cups/filter/rastertoptch and has a symlink to it from /usr/local/bin. After bumping up cupsd's logging, I see messages like "/bin/bash: /usr/local/bin/rastertoptch: Permission Denied" in cups's error_log. I could not for the life of me figure out why it was denied, but I eventually got it working by copying this binary to /usr/bin. After wasting those hours, I have just discovered bug #131470 and now know that this problem is due to cupsd's "app armor" settings. In particular, /etc/apparmor.d/usr.sbin.cupsd does not allow any read access to /usr/local/lib or /usr/local/bin. So, this bug could be fixed by: 1) adding read-only access to a bit more of /usr/local in cupsd's apparmor settings, and 2) mentioning app-armor somewhere in /usr/share/doc/cupsys so poor sysadmins at least have a tiny hint as to what is happening. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups/+bug/160092/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp

