Ubuntu
cups package

apparmor notice when printing to the samba printer

Bug #659961 reported by discont
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
cups (Ubuntu)
Fix Released
Undecided
Martin Pitt

Bug Description

Binary package hint: cupsys

Pops up a notification when printing to the samba printer. Printing at the same time goes well.

Ubuntu 10.10, printer HP LaserJet 1200 сonnected to Ubuntu 10.04.

kern.log
====================================================================
Oct 13 17:37:01 laptop kernel: [ 9558.784902] type=1400 audit(1286977021.698:105610): apparmor="DENIED" operation="open" parent=1268 profile="/usr/sbin/cupsd" name="/var/run/samba/gencache.tdb" pid=25448 comm="smb" requested_mask="r" denied_mask="r" fsuid=7 ouid=0
Oct 13 17:37:01 laptop kernel: [ 9558.784952] type=1400 audit(1286977021.698:105611): apparmor="DENIED" operation="open" parent=1268 profile="/usr/sbin/cupsd" name="/var/run/samba/gencache.tdb" pid=25448 comm="smb" requested_mask="r" denied_mask="r" fsuid=7 ouid=0
Oct 13 17:37:02 laptop kernel: [ 9559.195349] type=1400 audit(1286977022.108:105612): apparmor="DENIED" operation="open" parent=1268 profile="/usr/sbin/cupsd" name="/var/run/samba/gencache.tdb" pid=25448 comm="smb" requested_mask="r" denied_mask="r" fsuid=7 ouid=0
=====================================================================

$ apt-cache policy apparmor-profiles
apparmor-profiles:
  Установлен: 2.5.1~rc1-0ubuntu2
  Кандидат: 2.5.1~rc1-0ubuntu2
  Таблица версий:
 *** 2.5.1~rc1-0ubuntu2 0
        500 http://ru.archive.ubuntu.com/ubuntu/ maverick/universe amd64 Packages
        100 /var/lib/dpkg/status

$ apt-cache policy cups
cups:
  Установлен: 1.4.4-6ubuntu2
  Кандидат: 1.4.4-6ubuntu2
  Таблица версий:
 *** 1.4.4-6ubuntu2 0
        500 http://ru.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
        100 /var/lib/dpkg/status

See original description

CVE References

discont (discont)
description: updated
Till Kamppeter (till-kamppeter)
affects: cupsys (Ubuntu) → cups (Ubuntu)
Changed in cups (Ubuntu):
assignee: nobody → Martin Pitt (pitti)
Revision history for this message
Martin Pitt (pitti) wrote :

Fixed in packaging trunk.

Changed in cups (Ubuntu):
status: New → Fix Committed
Revision history for this message
discont (discont) wrote :

Ok, thank you for quick response

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cups - 1.4.4-7

---------------
cups (1.4.4-7) unstable; urgency=low

  [ Till Kamppeter ]
  * debian/local/filters/pdf-filters/pdftopdf/parseargs.c,
    debian/local/filters/pdf-filters/pdftopdf/parseargs.cxx,
    debian/local/filters/pdf-filters/pdftopdf/parseargs.h,
    debian/local/filters/pdf-filters/pdftopdf/Makefile: Made pdftopdf
    building with Poppler 0.15.x. Thanks to Koji Otani for this patch.
  * debian/control: Added dependency on "cups-ppdc" package to the "cups"
    package, so that the PPDs of the drivers which come with CUPS get built
    (LP: #485383).

  [ Martin Pitt ]
  * ubuntu-upstart.dpatch: Wait until daemon is ready, to avoid race
    conditions with init scripts which expect cups tools to work right after
    restarting it. (LP: #647369)
  * ubuntu-upstart.dpatch: If D-BUS is not available, start on runlevels 2 to
    5, so that this also works in server environments. (LP: #650893)
  * debian/local/apparmor-profile: Allow access to /usr/local/lib/cups/**.
    (LP: #160092)
  * debian/local/apparmor-profile: Allow reading /usr/local/**, in case
    third-party printer drivers need auxiliary files.
  * debian/local/apparmor-profile: Allow reading /var/run/**. (LP: #659961)
  * ubuntu-upstart.dpatch: Time out after 5 seconds when the local socket
    doesn't get created. Apparently a lot of users disable it in cupsd.conf.
    (LP: #672438)
  * debian/local/filters/pdf-filters/addtocups: Link pdftoijs with $(CXX),
    since it's a C++ program. Fixes FTBFS with gcc 4.5.
  * debian/local/filters/pdf-filters/pdftopdf/Makefile: Explicitly pdftopdf
    with -lz. gcc 4.5 does not automatically link to transitive library
    dependencies any more.
  * drop_unnecessary_dependencies.dpatch: Drop hunk for reduced krb5/gssapi
    linkage. With gcc 4.5, we now need -lkrb5.

  [ Marc Deslauriers ]
  * Add CVE-2010-2941.dpatch: Fix denial of service and possible code execution
    via invalid free. Skip over and reserve unused tags in cups/ipp.{c,h}.
    [CVE-2010-2941]
 -- Martin Pitt <email address hidden> Fri, 12 Nov 2010 11:07:33 +0100

Changed in cups (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.