Public bug reported:

Binary package hint: cupsys

Ubuntu 7.10

local printer attached via USB.

On upgrading to gutsy and rebooting, printing no longer worked. My
printer is set up with a 3rd party driver (ptouch), and the ppd file
sets up a "foomatic-rip" line with gs output piped to "rastertoptch".
This driver gets installed into /usr/local/lib/cups/filter/rastertoptch
and has a symlink to it from /usr/local/bin.

After bumping up cupsd's logging, I see messages like "/bin/bash:
/usr/local/bin/rastertoptch: Permission Denied" in cups's error_log. I
could not for the life of me figure out why it was denied, but I
eventually got it working by copying this binary to /usr/bin.

After wasting those hours, I have just discovered bug #131470 and now know that 
this problem is due to cupsd's "app armor" settings.
In particular, /etc/apparmor.d/usr.sbin.cupsd does not allow any read access to 
/usr/local/lib or /usr/local/bin.

So, this bug could be fixed by:
1) adding read-only access to a bit more of /usr/local in cupsd's apparmor 
settings, and
2) mentioning app-armor somewhere in /usr/share/doc/cupsys so poor sysadmins at 
least have a tiny hint as to what is happening.

** Affects: cupsys (Ubuntu)
     Importance: Undecided
         Status: New

-- 
gutsy cupsys apparmor breaks filters in /usr/local
https://bugs.launchpad.net/bugs/160092
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to