This bug was fixed in the package cups-filters - 1.0.44-2
---------------
cups-filters (1.0.44-2) unstable; urgency=medium
[ Jamie Strandboge ]
* Add patch to ensure that under upstart, the apparmor profile is
loaded in the kernel before cups-browsed is started (LP: #1276630)
[ Didier Raboud ]
* Drop specific fonts' dependencies from cups-filters, as a reasonable
set of fonts is provided through fontconfig already, thanks to
Fabian Greffrath (Closes: #735223, #670059)
-- Didier Raboud <[email protected]> Wed, 05 Feb 2014 17:25:00 +0100
** Changed in: cups-filters (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to cups-filters in Ubuntu.
https://bugs.launchpad.net/bugs/1276630
Title:
cups-browsed upstart job does not load the apparmor profile for cups-
browsed
Status in “cups-filters” package in Ubuntu:
Fix Released
Bug description:
On up to date trust I noticed that:
$ sudo aa-status
apparmor module is loaded.
124 profiles are loaded.
...
/usr/sbin/cups-browsed
0 profiles are in complain mode.
32 processes have profiles defined.
31 processes are in enforce mode.
...
0 processes are in complain mode.
1 processes are unconfined but have a profile defined.
/usr/sbin/cups-browsed (1222)
This means that while there is an apparmor profile for cups-browsed
and it is loaded (good), it is being loaded into the kernel after
/usr/sbin/cups-browsed is started which means that /usr/sbin/cups-
browsed is running unconfined (bad).
Fix is to adjust the upstart job to either use /lib/init/apparmor-
profile-load in the pre-start or to use the new apparmor stanza in the
upstart job. Since cups itself is still using /lib/init/apparmor-
profile-load, attached is a patch to use it for cups-browsed.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-filters/+bug/1276630/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
