Comment 2 for bug 1031583

Revision history for this message
Steve Beattie (sbeattie) wrote :

The specific rejection is:

  [ 351.624338] type=1400 audit(1343775571.688:27): apparmor="DENIED" operation="capable" parent=1 profile="/usr/sbin/cupsd" pid=1361 comm="cupsd" pid=1361 comm="cupsd" capability=36 capname="block_suspend"

This capability was added in http://repo.or.cz/w/linux-2.6.git/commit/d9914cf66181b8aa0929775f5c6f675c6ebc3eb5 and governs the ability to block suspending (currently via the EPOLLWAKEUP flag). Reading the the discussion thread about the feature at http://thread.gmane.org/gmane.linux.kernel/1249726/focus=1288990 , it's not entirely clear to me that cups needs this capability.

The cups apparmor profile is maintained in the cups package; moving there.