custom printer driver prevented from executing

Asked by Janos G. Komaromi

I'm tryint to make my Lexmark Z2420 work on Xubuntu > = 10.04. The Lexmark provided installation does not work, package is bad, etc. I worked around it because I was able to extract either the deb or rpm package. In fact, the printer works on an old version of Linux installation (Fedore-3 based), on the same machine. So the driver is OK. It is basically a ppd and a related proprietary printer driver written by Lexmark.

The problem is with Ubuntu, or specifically with some security system tyhat is part of 10.04, 12.04 or 13.04. Here is the output of dmesg. IT explains the problem, but I'm new to debian (or Ubuntu), and therefore I don't know how to open up the security to enable running the printer driver.

Quote:

[ 2615.809241] type=1400 audit(1370314741.028:21): apparmor="DENIED" operation="exec" parent=720 profile="/usr/sbin/cupsd" name="/usr/local/lexmark/08zero/bin/printdriver" pid=2175 comm="cupsd" requested_mask="x" denied_mask="x" fsuid=7 ouid=0

Unquote

Thanks,

Janos

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Daniel Letzeisen (dtl131) said :
#1

It sounds like you might have to change permissions on /usr/local/lexmark/08zero/bin/printdriver

ls -la /usr/local/lexmark/08zero/bin/printdriver
(sudo) chmod +x /usr/local/lexmark/08zero/bin/printdriver

Revision history for this message
Janos G. Komaromi (jankom) said :
#2

Re Daniel's suggestion:

It is already executable. It seems to me that apparmor is intercepting it and forbids execution.

ls -la output before doing any chmod:

-rwxr-xr-x 1 root root 63851 Jun 3 11:30 /usr/local/lexmark/08zero/bin/printdriver

One more thing: I copied this file (and adjusted the ppd) to /usr/sbin directory where some other cups executables reside. Tried to print, it went through, no dmesg entry, no printer error - BUT - printing system reports that "Printer may not be connected".

Consequently, apparmor is definitely a problem. The "Printer may not be connected" part is probably due to the fact that "printdriver" executable requires shared libraries still in the /usr/local/lexmark/08zero/bin directory. So this is a red herring, should disappear once the apparmor problem is solved. By the way, this is a network printer through wireless, and filemanager does see it.

Am I on the right track? How can I change apparmor settings so that it would allow activities in /usr/local/lexmark/08zero/bin? ?

Janos

Janos

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#3

Sounds like a bug to me. Apparmor needs dialling back a touch

Can you help with this problem?

Provide an answer of your own, or ask Janos G. Komaromi for more information if necessary.

To post a message you must log in.