[pkg-apparmor] Bug#872817: cups-daemon: apparmor DENIED

[gregor herrmann]

Package: cups-daemon
Version: 2.2.4-3
Severity: normal
User: pkg-apparmor-team at lists.alioth.debian.org
Usertags: help-needed

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

apparmor newbie here.

Without doing anything printer-related, aa-notify informed me about
an apparmor problem with cupsd; syslog says:

Aug 21 16:40:22 jadzia kernel: [95510.664500] audit: type=1400 audit(1503326422.923:230): apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=21581 comm="cupsd" capability=2  capname="dac_read_search"


Thanks in advance for checking!


Cheers,
gregor


- -- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500, 'oldoldstable'), (500, 'experimental'), (500, 'testing'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=de_AT.utf8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Versions of packages cups-daemon depends on:
ii  adduser              3.116
ii  bc                   1.06.95-9+b3
ii  dpkg                 1.18.24
ii  init-system-helpers  1.49
ii  libavahi-client3     0.6.32-2
ii  libavahi-common3     0.6.32-2
ii  libc6                2.24-14
ii  libcups2             2.2.4-3
ii  libcupsmime1         2.2.4-3
ii  libdbus-1-3          1.11.16+really1.10.22-1
ii  libgssapi-krb5-2     1.15.1-2
ii  libpam0g             1.1.8-3.6
ii  libpaper1            1.1.24+nmu5
ii  libsystemd0          234-2
ii  lsb-base             9.20161125
ii  procps               2:3.3.12-3
ii  ssl-cert             1.0.39

Versions of packages cups-daemon recommends:
pn  avahi-daemon  <none>
pn  colord        <none>
ii  cups-browsed  1.16.1-1

Versions of packages cups-daemon suggests:
ii  cups                                2.2.4-3
ii  cups-bsd                            2.2.4-3
ii  cups-client                         2.2.4-3
ii  cups-common                         2.2.4-3
ii  cups-filters [foomatic-filters]     1.16.1-1
ii  cups-ppdc                           2.2.4-3
ii  cups-server-common                  2.2.4-3
ii  foomatic-db                         20170723-1
ii  ghostscript                         9.21~dfsg-1
pn  hplip                               <none>
ii  poppler-utils                       0.48.0-2
ii  printer-driver-cups-pdf [cups-pdf]  3.0.1-4
ii  printer-driver-gutenprint           5.2.13-1
ii  printer-driver-hpcups               3.17.7+repack0-3
ii  smbclient                           2:4.6.7+dfsg-1
ii  udev                                234-2

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=KOsB
-----END PGP SIGNATURE-----