Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: ubuntu
Status: New => Confirmed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to cups in Ubuntu.
https://bugs.launchpad.net/bugs/160092
Title:
apparmor rules break filters in /usr/local
Status in “cups” package in Ubuntu:
Fix Released
Bug description:
Binary package hint: cupsys
Ubuntu 7.10
local printer attached via USB.
On upgrading to gutsy and rebooting, printing no longer worked. My
printer is set up with a 3rd party driver (ptouch), and the ppd file
sets up a "foomatic-rip" line with gs output piped to "rastertoptch".
This driver gets installed into
/usr/local/lib/cups/filter/rastertoptch and has a symlink to it from
/usr/local/bin.
After bumping up cupsd's logging, I see messages like "/bin/bash:
/usr/local/bin/rastertoptch: Permission Denied" in cups's error_log. I
could not for the life of me figure out why it was denied, but I
eventually got it working by copying this binary to /usr/bin.
After wasting those hours, I have just discovered bug #131470 and now know
that this problem is due to cupsd's "app armor" settings.
In particular, /etc/apparmor.d/usr.sbin.cupsd does not allow any read access
to /usr/local/lib or /usr/local/bin.
So, this bug could be fixed by:
1) adding read-only access to a bit more of /usr/local in cupsd's apparmor
settings, and
2) mentioning app-armor somewhere in /usr/share/doc/cupsys so poor sysadmins
at least have a tiny hint as to what is happening.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/160092/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
