[SOLVED] cups print server on pve floods logs

[RobFantini]

at home pve server I installed desktop software . cups print server causes dmesg and other logs to fill up with:

 # dmesg -c
[76460.986565] audit: type=1400 audit(1459877391.530:76449): apparmor="DENIED" operation="connect" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/cups-browsed" name="run/cups/cups.sock" pid=7859 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[76461.987585] audit: type=1400 audit(1459877392.526:76450): apparmor="DENIED" operation="connect" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/cups-browsed" name="run/cups/cups.sock" pid=7859 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[76462.988646] audit: type=1400 audit(1459877393.530:76451): apparmor="DENIED" operation="connect" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/cups-browsed" name="run/cups/cups.sock" pid=7859 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[76463.989681] audit: type=1400 audit(1459877394.526:76452): apparmor="DENIED" operation="connect" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/cups-browsed" name="run/cups/cups.sock" pid=7859 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0

any clues on adjusting configuration to prevent the messages?

 

[fabian]

This has nothing to do with ProxMox whatsoever. File a bugreport in the Debian bug tracker for the incomplete app armor profile, extend it locally yourself, don't use cups-browsed or don't confine it with apparmor (recommended in that order ).

 

[RobFantini]

OK will do thank you

 

[RobFantini]

bug reported and fixed :

This is an automatic notification regarding your Bug report
which was filed against the cups-browsed package:

#846884: cups-browsed: incomplete app armor profile

It has been closed

 

[carlosmora]

I run into the same problem. Solved following the directions in

<forbidden link>

I thought it would be fixed, but it isn't. So here the solution meanwhile.

Edited: New users cannot post links, so you must go to https bugs dot debian.org dot cgi-bin slash bugreport.cgi <question> bug=846884

 

[RobFantini]

Hello Carlos
can you try posting the solution again?

 

[carlosmora]

As explained in
https bugs.debian.org/cgi-bin/bugreport.cgi?bug=846884
follow the directions :
1) patch /etc/apparmor.d/usr.sbin.cups-browsed
-/usr/sbin/cups-browsed {
+/usr/sbin/cups-browsed flags=(attach_disconnected) {

2)
reload the profile with:

sudo apparmor_parser -v -r /etc/apparmor.d/usr.sbin.cups-browsed

3)
then restart the service:

sudo service cups-browsed restart
this last one is slightly different from the command in the original bugreport post.

Hope it helps