Public bug reported: Ubuntu 12.04, using the CUPS HTTP administration console from a user account with encrypted home, shows this series of errors repeatedly when doing many job control operations:
=== /var/log/auth.log === Dec 10 13:07:30 XPSm1530 cupsd[18772]: pam_ecryptfs: Passphrase file wrapped Dec 10 13:07:30 XPSm1530 cupsd[18772]: Error attempting to open [/home/tj/.ecryptfs/wrapped-passphrase] for reading Dec 10 13:07:30 XPSm1530 cupsd[18772]: Error attempting to unwrap passphrase from file [/home/tj/.ecryptfs/wrapped-passphrase]; rc = [-5] Dec 10 13:07:30 XPSm1530 cupsd[18772]: pam_ecryptfs: Error adding passphrase key token to user session keyring; rc = [-5] === /var/log/syslog === Dec 10 13:07:24 XPSm1530 kernel: [123850.373668] type=1400 audit(1355144844.810:89): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/Private.mnt" pid=18268 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 Dec 10 13:07:25 XPSm1530 kernel: [123850.739593] type=1400 audit(1355144845.174:90): apparmor="DENIED" operation="open" parent=18268 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/wrapped-passphrase" pid=18770 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 Dec 10 13:07:30 XPSm1530 kernel: [123856.057963] type=1400 audit(1355144850.494:91): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/Private.mnt" pid=18268 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 Dec 10 13:07:30 XPSm1530 kernel: [123856.435397] type=1400 audit(1355144850.870:92): apparmor="DENIED" operation="open" parent=18268 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/wrapped-passphrase" pid=18772 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 Which suggests that cupsd is trying to run some process(es) as the current user and failing the log-in due to the apparmor profile. The user is currently logged in when this occurs so the home directory is already unencrypted. ** Affects: cups (Ubuntu) Importance: Undecided Status: New ** Description changed: Ubuntu 12.04, using the CUPS HTTP administration console from a user account with encrypted home, shows this series of errors repeatedly when doing many job control operations: + + === /var/log/auth.log === Dec 10 13:07:30 XPSm1530 cupsd[18772]: pam_ecryptfs: Passphrase file wrapped Dec 10 13:07:30 XPSm1530 cupsd[18772]: Error attempting to open [/home/tj/.ecryptfs/wrapped-passphrase] for reading Dec 10 13:07:30 XPSm1530 cupsd[18772]: Error attempting to unwrap passphrase from file [/home/tj/.ecryptfs/wrapped-passphrase]; rc = [-5] Dec 10 13:07:30 XPSm1530 cupsd[18772]: pam_ecryptfs: Error adding passphrase key token to user session keyring; rc = [-5] - Which suggests that cupsd is trying to run some process(es) as the - current user and failing the log-in. The user is currently logged in - when this occurs so the home directory is already unencrypted. + === /var/log/syslog === + Dec 10 13:07:24 XPSm1530 kernel: [123850.373668] type=1400 audit(1355144844.810:89): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/Private.mnt" pid=18268 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 + Dec 10 13:07:25 XPSm1530 kernel: [123850.739593] type=1400 audit(1355144845.174:90): apparmor="DENIED" operation="open" parent=18268 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/wrapped-passphrase" pid=18770 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 + Dec 10 13:07:30 XPSm1530 kernel: [123856.057963] type=1400 audit(1355144850.494:91): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/Private.mnt" pid=18268 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 + Dec 10 13:07:30 XPSm1530 kernel: [123856.435397] type=1400 audit(1355144850.870:92): apparmor="DENIED" operation="open" parent=18268 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/wrapped-passphrase" pid=18772 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 + + + Which suggests that cupsd is trying to run some process(es) as the current user and failing the log-in due to the apparmor profile. The user is currently logged in when this occurs so the home directory is already unencrypted. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1088467 Title: cupsd: pam_ecryptfs: Error adding passphrase key token to user session keyring; rc = [-5] Status in “cups” package in Ubuntu: New Bug description: Ubuntu 12.04, using the CUPS HTTP administration console from a user account with encrypted home, shows this series of errors repeatedly when doing many job control operations: === /var/log/auth.log === Dec 10 13:07:30 XPSm1530 cupsd[18772]: pam_ecryptfs: Passphrase file wrapped Dec 10 13:07:30 XPSm1530 cupsd[18772]: Error attempting to open [/home/tj/.ecryptfs/wrapped-passphrase] for reading Dec 10 13:07:30 XPSm1530 cupsd[18772]: Error attempting to unwrap passphrase from file [/home/tj/.ecryptfs/wrapped-passphrase]; rc = [-5] Dec 10 13:07:30 XPSm1530 cupsd[18772]: pam_ecryptfs: Error adding passphrase key token to user session keyring; rc = [-5] === /var/log/syslog === Dec 10 13:07:24 XPSm1530 kernel: [123850.373668] type=1400 audit(1355144844.810:89): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/Private.mnt" pid=18268 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 Dec 10 13:07:25 XPSm1530 kernel: [123850.739593] type=1400 audit(1355144845.174:90): apparmor="DENIED" operation="open" parent=18268 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/wrapped-passphrase" pid=18770 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 Dec 10 13:07:30 XPSm1530 kernel: [123856.057963] type=1400 audit(1355144850.494:91): apparmor="DENIED" operation="open" parent=1 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/Private.mnt" pid=18268 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 Dec 10 13:07:30 XPSm1530 kernel: [123856.435397] type=1400 audit(1355144850.870:92): apparmor="DENIED" operation="open" parent=18268 profile="/usr/sbin/cupsd" name="/home/.ecryptfs/tj/.ecryptfs/wrapped-passphrase" pid=18772 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 Which suggests that cupsd is trying to run some process(es) as the current user and failing the log-in due to the apparmor profile. The user is currently logged in when this occurs so the home directory is already unencrypted. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1088467/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp