The specific rejection is:

  [  351.624338] type=1400 audit(1343775571.688:27): apparmor="DENIED"
operation="capable" parent=1 profile="/usr/sbin/cupsd" pid=1361
comm="cupsd" pid=1361 comm="cupsd" capability=36
capname="block_suspend"

This capability was added in
http://repo.or.cz/w/linux-2.6.git/commit/d9914cf66181b8aa0929775f5c6f675c6ebc3eb5
and governs the ability to block suspending (currently via the
EPOLLWAKEUP flag). Reading the the discussion thread about the feature
at http://thread.gmane.org/gmane.linux.kernel/1249726/focus=1288990 ,
it's not entirely clear to me that cups needs this capability.

The cups apparmor profile is maintained in the cups package; moving
there.

** Changed in: apparmor (Ubuntu)
       Status: New => Confirmed

** Package changed: apparmor (Ubuntu) => cups (Ubuntu)

** Tags added: apparmor

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1031583

Title:
  dmesg reports: apparmor="DENIED" for cupsd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1031583/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to