Comment 5 for bug 1199933

Revision history for this message
Jeffery von Ronne (vonronne) wrote :

Yes. I think it is fair to characterize this as the inverse of 1058356.

Basically, if one uses precise with a backported kernel, one gets an implicity "deny capability block_suspend" that can't be changed in all apparmor profiles, because the tools and profiles do not know about block_suspend.

I'm not sure that cups really needs block_suspend, but it affects anything apparmored using precise tools and a raring kernel. I actually first saw this when after using aa-genprof on crashplan, which suggested adding an "capability block_suspend" line, but after adding it, the profile wouldn't load. (I'm not sure why crashplan needs to block_suspend either, though.)