From 97d7fa3f5f2ca016f853af6dbb97187f9525adf5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Sommer?= <joerg@jo-so.de>
Date: Tue, 31 Dec 2024 10:06:29 +0100
Subject: [PATCH] cupsd: Add /etc/paperspecs read access

Cups uses libpaper which accesses /etc/paperspecs.

https://github.com/rrthomas/libpaper/blob/ce42216e2e3cd3fdf97d666aed6fa28f8ad5b9d4/lib/libpaper.c.in.in#L419
---
 profiles/apparmor/profiles/extras/usr.sbin.cupsd | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/profiles/apparmor/profiles/extras/usr.sbin.cupsd b/profiles/apparmor/profiles/extras/usr.sbin.cupsd
index 9b51b8453..22e8c2cad 100644
--- a/profiles/apparmor/profiles/extras/usr.sbin.cupsd
+++ b/profiles/apparmor/profiles/extras/usr.sbin.cupsd
@@ -65,6 +65,8 @@ include <tunables/global>
   /var/cache/cups/ rw,
   /var/cache/cups/** rw,
 
+  /etc/paperspecs r,
+
   # Site-specific additions and overrides. See local/README for details.
   include if exists <local/usr.sbin.cupsd>
 }