cups and evince not working after installation of kernel

[ChriChri]

To get me started with Proxmox I'm trying to install it on my Debian Bookworm Notebook.

After installing the kernel and booting into it I found that I couldn't print anymore (cups: network printer attached via configuration in gnome control center) and that evince wouldn't open anymore. Rebooting back to the former Debian kernel SMP PREEMPT_DYNAMIC Debian 6.1.147-1 (2025-08-02) solved the problem.

It seems the reason for the problems is apparmor, because there are a lot of messages in the journal.

I read that the pve kernel does have some patches regarding apparmor.

Shouldn't the apparmor settings used by the Debian kernel keep working with the pve kernel?

 

[ChriChri]

I confirmed the reason for the problems is AppArmor. Setting cupsd and evince to complain mode makes them work again.

Trying to generate a new rule set for evince using aa-genprof I got this:

# aa-genprof evince

ERROR: Include file /etc/apparmor.d/libvirt/libvirt-96dc5ee2-68e6-47ff-a0e0-451a6769f6d9.files not found

This message persisted after installing the proxmox-ve packages.

Hypothesis: virt-manager (my former virtualization software) generated the content of /etc/apparmor.d/libvirt/ and the missing files that were included never led to any error. When trying to make rule sets for cups and evince the error showed.

Just touching the missing, but by include referenced files made aa-genprof work.