cups 1.4.7-1 fails to start with new apparmor profile (/var/run -> /run)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
cups (Ubuntu) |
Fix Released
|
High
|
Jamie Strandboge |
Bug Description
Upgraded oneiric today and the upgrade froze after:
Setting up apport-gtk (1.21.2-0ubuntu3) ...
Setting up cups-common (1.4.7-1) ...
Setting up cups-client (1.4.7-1) ...
Setting up cups-bsd (1.4.7-1) ...
Setting up cups-ppdc (1.4.7-1) ...
Setting up cups (1.4.7-1) ...
Installing new version of config file /etc/init/cups.conf ...
Installing new version of config file /etc/apparmor.
And /var/log/kern.log kept repeating:
Jul 14 14:42:22 jconti-testing kernel: [ 2937.706695] type=1400 audit(131066894
Jul 14 14:42:22 jconti-testing kernel: [ 2937.707902] type=1400 audit(131066894
Jul 14 14:42:23 jconti-testing kernel: [ 2937.725707] type=1400 audit(131066894
Jul 14 14:42:23 jconti-testing kernel: [ 2937.725951] type=1400 audit(131066894
Jul 14 14:42:23 jconti-testing kernel: [ 2937.726637] init: cups main process (17729) terminated with status 1
Jul 14 14:42:23 jconti-testing kernel: [ 2937.726684] init: cups main process ended, respawning
The upgrade completed successfully once I stopped the cups service. This seems to be because /etc/apparmor.
I managed to get the service started by adding the following lines to /etc/apparmor.
/var/run/cups/ rw,
/var/run/cups/** rw,
Related branches
Changed in cups (Ubuntu): | |
assignee: | nobody → Jamie Strandboge (jdstrand) |
importance: | Undecided → High |
milestone: | none → oneiric-alpha-3 |
status: | New → Triaged |
Changed in cups (Ubuntu): | |
status: | Triaged → In Progress |
I have the same problem, had to do
sudo aa-complain cupsd
and then get in /var/log/syslog
Jul 14 21:54:59 localhost6 kernel: [110707.127146] type=1400 audit(1310673299.63 "/usr/sbin/ cupsd" var/run/ cups/certs/ 0" pid=27266 comm="cupsd" requested_mask="w" denied_ma
6:392): apparmor="ALLOWED" operation="chown" parent=1 profile=
name="/
sk="w" fsuid=0 ouid=0
When abolishing /var/run/ in favor of /run/, CUPS itself needs to get built appropriately.