Re: [opensuse] problems starting CUPS
On Sunday 22 February 2009 22:59:51 Anders Johansson wrote:
On Sunday 22 February 2009 22:24:05 Joel Young wrote:
Tried to set all kind of write permission's with no go, what is wrong? What am I overlooking?
Do you get anything in /var/log/audit/audit.log ?
Anders hmmm yes a lot, but that I file I don't understand much off other than I can see that my trouble comes from AppArmor. Don't see where to cut in the file, so I made all of it available at http://www.2b-young.com/~julle/audit.log --
Greetings from Joel Young aka JULLE -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sunday 22 February 2009 23:23:34 Joel Young wrote:
On Sunday 22 February 2009 22:59:51 Anders Johansson wrote:
On Sunday 22 February 2009 22:24:05 Joel Young wrote:
Tried to set all kind of write permission's with no go, what is wrong? What am I overlooking?
Do you get anything in /var/log/audit/audit.log ?
Anders
hmmm yes a lot, but that I file I don't understand much off other than I can see that my trouble comes from AppArmor. Don't see where to cut in the file, so I made all of it available at http://www.2b-young.com/~julle/audit.log
Yup, it's being blocked by AppArmor. You can see the lines spread out all through the file, just one example would be type=APPARMOR_DENIED msg=audit(1235336998.031:132): operation="inode_permission" requested_mask="ra::" denied_mask="ra::" fsuid=0 name="/var/log/cups/error_log" pid=6800 profile="/usr/sbin/cupsd" It's trying to open the file with a mask called "ra", which I'm not completely sure what that is. But it is being blocked by the cups profile. Strangely, the cups profile is not in use on my system even though AppArmor is running. Have you increased the security level of your system? In any case, running "rcapparmor stop" will allow cups to run. But if this is a server on an untrusted network, you should probably consider configuring the apparmor profile for cups correctly instead Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Anders Johansson
-
Joel Young