Access to /run/cups/printcap not provided by any interface

While playing with my wine2-15 snap (still a devmode snap in the edge channel ATM) today, i noticed there is still one remaining “ALLOWED” message in my syslog when running any windows exe’s and all interfaces are connected …

Nov  4 12:53:16 anubis kernel: [870871.461489] audit: type=1400 audit(1509796396.335:24048036): apparmor="ALLOWED" operation="open" profile="snap.wine2-15.wine" name="/run/cups/printcap" pid=7295 comm="SolStat.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

Obviously wine would like to read /run/cups/printcap, but grepping through snapd/interfaces in the git tree does not reveal any access to /run/cups …

I would have expected to find read access for this file in the cups-control interface … @jdstrand could we add this ?

Yes. I’ll add this in the next batch of policy updates.

1 Like

https://github.com/snapcore/snapd/pull/4180 and https://github.com/snapcore/snapd/pull/4181

1 Like