Comment 3 for bug 1721278

Revision history for this message
Doug Smythies (dsmythies) wrote : Re: apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed"

Paul wrote:

> I am using Linux 4.14-rc3+.

O.K. that is/was really important information.

While I have been calling this a kernel regression, it might be that a great number of apparmor profiles need to be updated to accommodate the new security stuff that was introduced in kernel 4.14-rc2 (it missed -rc1 due to some issues, and it is not normal to include such major changes in anything other than -rc1). i.e. It might be that this is a non-backwards compatible kernel change.

Anyway, I know nothing about this area of the kernel, and will step back now.

To be able to proceed with my own work, I have compiled kernel 4.14-rc3 (and now 4.14-rc4) with apparmor disabled.