Ubuntu
cups package

Switching on my usb-connected brother HL-2140 printer generates apparmor denial message

Bug #692892 reported by James Hunt
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
cups (Ubuntu)
Fix Released
Low
Martin Pitt

Bug Description

Binary package hint: cups

/var/log/kern.log show:

Dec 21 08:46:08 azul kernel: [ 1759.118058] usb 2-1.1.5: new full speed USB device using ehci_hcd and address 8
Dec 21 08:46:08 azul kernel: [ 1759.213679] usblp1: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x04F9 pid 0x0033
Dec 21 08:46:09 azul kernel: [ 1760.391402] usb 2-1.1.5: usbfs: interface 0 claimed by usblp while 'usb' sets config #1
Dec 21 08:46:09 azul kernel: [ 1760.391427] usb 2-1.1.2: usbfs: interface 0 claimed by usblp while 'usb' sets config #1
Dec 21 08:46:09 azul kernel: [ 1760.483889] audit_printk_skb: 15 callbacks suppressed
Dec 21 08:46:09 azul kernel: [ 1760.483894] type=1400 audit(1292921169.925:17): apparmor="DENIED" operation="open" parent=23034 profile="/usr/sbin/cupsd" name="/dev/ttyUSB0" pid=23038 comm="serial" requested_mask="w" denied_mask="w" fsuid=0 ouid=0

This doesn't stop the printer from working as expected though.

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: cups 1.4.4-6ubuntu2.2
ProcVersionSignature: Ubuntu 2.6.35-22.35-generic-pae 2.6.35.4
Uname: Linux 2.6.35-22-generic-pae i686
NonfreeKernelModules: nvidia
Architecture: i386
CupsErrorLog: E [21/Dec/2010:08:26:23 +0000] Unable to bind socket for address ::1:631 - Cannot assign requested address.
Date: Tue Dec 21 08:46:54 2010
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release i386 (20101007)
Lpstat:
 device for HL-2140-series: usb://Brother/HL-2140%20series
 device for Xerox-WorkCentre-7228: dnssd://WorkCentre%207228%20(36%3Afffffffc%3Afffffffe)._printer._tcp.local/
MachineType: LENOVO 2516CTO
Papersize: a4
PpdFiles:
 HL-2140-series: Brother HL-2140 Foomatic/hpijs-pcl5e (recommended)
 Xerox-WorkCentre-7228: Xerox WorkCentre 7228 Foomatic/Postscript
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.35-22-generic-pae root=UUID=7ad192e9-7b26-49d1-8e1c-fefc7dc495cb ro acpi_sleep=nonvs quiet splash
ProcEnviron:
 PATH=(custom, user)
 LANG=en_GB.utf8
 SHELL=/bin/bash
SourcePackage: cups
dmi.bios.date: 08/27/2010
dmi.bios.vendor: LENOVO
dmi.bios.version: 6IET72WW (1.32 )
dmi.board.name: 2516CTO
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr6IET72WW(1.32):bd08/27/2010:svnLENOVO:pn2516CTO:pvrThinkPadT410:rvnLENOVO:rn2516CTO:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 2516CTO
dmi.product.version: ThinkPad T410
dmi.sys.vendor: LENOVO

Revision history for this message
James Hunt (jamesodhunt) wrote :
Till Kamppeter (till-kamppeter)
Changed in cups (Ubuntu):
assignee: nobody → Martin Pitt (pitti)
importance: Undecided → Low
status: New → Confirmed
Revision history for this message
Martin Pitt (pitti) wrote :

Fixed in bzr.

Changed in cups (Ubuntu):
status: Confirmed → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cups - 1.4.5-1ubuntu1

---------------
cups (1.4.5-1ubuntu1) natty; urgency=low

  [ Till Kamppeter ]
  * debian/patches/cups-avahi.dpatch: Added patch from Tim Waugh from Red Hat
    to implement full Avahi support, not only for printer discovery by the
    "dnssd" backend but also for print queue broadcasting and browsing by the
    scheduler (CUPS daemon). Fixes LP: #465916.
  * debian/patches/dnssd-avahi.dpatch: Removed, is part of new
    cups-avahi.dpatch.
  * debian/patches/quiesce-bonjour-warning.dpatch: Removed, not needed any
    more with the new cups-avahi.dpatch.
  * debian/patches/usb-backend-no-segfault-on-bad-device-id.dpatch: Assure
    that the device ID string read from a USB device can never be a mess: Try
    other byte order for device ID string length also if length is too small,
    empty the read device ID string if there is an IOCTL failure, reject ID
    strings with unprintable characters, clean white space in the ID string,
    and finally accept the empty ID string as an unknown device. This
    overcomes the problem that USB-to-Parallel adapter cables do not
    report back a usable ID string. With these changes it is at least possible
    to use one adapter cable per computer if the cables do not report unique
    serial numbers via libusb and any number of adapter cables if they do
    report serial numbers via libusb. Real USB printers can always be used,
    also if there are other printers connected with an adapter cable
    (LP: #468701, LP: #564917).

  [ Martin Pitt ]
  * debian/local/apparmor-profile: Explicitly deny access to ttyUSB* to
    silence noise. This is presumably an extra control channel for some USB
    printers, but cupsd can't use it anyway. (LP: #692892)
 -- Till Kamppeter <email address hidden> Sun, 26 Dec 2010 18:07:33 +0100

Changed in cups (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.