apparmor - 无法打印,发现 32 个配置文件处于强制模式

apparmor - 无法打印,发现 32 个配置文件处于强制模式

我最近安装了 Ubuntu 20.10(之前使用的是 18.04)。我尝试打印(之前打印没有问题),并注意到 apparmor 消息显示 cups 被拒绝。我发现一些网站让我安装 apparmor-utils 并为与 cups 相关的任何内容设置投诉模式,但我仍然无法打印,并且在尝试打印时收到类似的消息,但现在标记为允许:

[  735.428563] audit: type=1400 audit(1606403130.615:72): apparmor="ALLOWED" operation="open" profile="/usr/sbin/cupsd" name="/proc/3390/attr/apparmor/current" pid=792 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=114

此外,还有 29 个程序处于强制模式,这对我来说似乎很疯狂。这正常吗?

apparmor module is loaded.
35 profiles are loaded.
29 profiles are in enforce mode.
   /snap/snapd/9721/usr/lib/snapd/snap-confine
   /snap/snapd/9721/usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/bin/evince
   /usr/bin/evince-previewer
   /usr/bin/evince-previewer//sanitized_helper
   /usr/bin/evince-thumbnailer
   /usr/bin/evince//sanitized_helper
   /usr/bin/man
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/sbin/cupsd//third_party
   /{,usr/}sbin/dhclient
   libreoffice-senddoc
   libreoffice-soffice//gpg
   libreoffice-xpdfimport
   lsb_release
   man_filter
   man_groff
   nvidia_modprobe
   nvidia_modprobe//kmod
   snap-update-ns.snap-store
   snap.snap-store.hook.configure
   snap.snap-store.snap-store
   snap.snap-store.ubuntu-software
   snap.snap-store.ubuntu-software-local-file
   tcpdump
6 profiles are in complain mode.
   /usr/lib/cups/backend/cups-pdf
   /usr/sbin/cups-browsed
   /usr/sbin/cupsd
   /usr/sbin/sssd
   libreoffice-oopslash
   libreoffice-soffice
0 profiles are in kill mode.
0 profiles are in unconfined mode.
7 processes have profiles defined.
1 processes are in enforce mode.
   /snap/snap-store/498/usr/bin/snap-store (1670) snap.snap-store.ubuntu-software
6 processes are in complain mode.
   /usr/sbin/cups-browsed (847) 
   /usr/sbin/cupsd (792) 
   /usr/lib/cups/notifier/dbus (3432) /usr/sbin/cupsd
   /usr/lib/cups/notifier/dbus (3433) /usr/sbin/cupsd
   /usr/lib/libreoffice/program/oosplash (3324) libreoffice-oopslash
   /usr/lib/libreoffice/program/soffice.bin (3341) libreoffice-soffice
0 processes are unconfined but have a profile defined.
0 processes are in mixed mode.
0 processes are in kill mode.

任何帮助,将不胜感激

相关内容