Lot of Apparmor "DENIED" and cant print

[mahesh]

Since a couple of weeks, printing is an issue: print job is stopped.
Looking at logs, many Apparmor DENIED around cups and snap:

Code:

Code Select Expand

AVC apparmor="DENIED" operation="connect" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1244 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=101
kernel: audit: type=1400 audit(1664169645.447:47): apparmor="DENIED" operation="connect" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1244 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=101
kernel: audit: type=1400 audit(1664169645.471:48): apparmor="DENIED" operation="connect" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1244 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=101
 AVC apparmor="DENIED" operation="connect" profile="/usr/sbin/cups-browsed" name="/run/systemd/resolve/io.systemd.Resolve" pid=1244 comm="cups-browsed" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=101
audit[4546]: AVC apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/cups/doc-root/" pid=4546 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
audit[4546]: AVC apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/gimp/2.0/" pid=4546 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
 AVC apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/libreoffice/help/" pid=4546 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
 AVC apparmor="DENIED" operation="open" profile="snap-update-ns.firefox" name="/var/lib/" pid=4546 comm="6" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
kernel: audit: type=1400 audit(1664169970.403:58): apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/cups/doc-root/" pid=4546 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
kernel: audit: type=1400 audit(1664169970.403:59): apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/gimp/2.0/" pid=4546 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
kernel: audit: type=1400 audit(1664169970.403:60): apparmor="DENIED" operation="mkdir" profile="snap-update-ns.firefox" name="/usr/share/libreoffice/help/" pid=4546 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
kernel: audit: type=1400 audit(1664169970.403:61): apparmor="DENIED" operation="open" profile="snap-update-ns.firefox" name="/var/lib/" pid=4546 comm="6" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
audit[5282]: AVC apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=5282 comm="snap-confine" capability=12  capname="net_admin"
audit[5282]: AVC apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=5282 comm="snap-confine" capability=38  capname="perfmon"
kernel: audit: type=1400 audit(1664170061.076:62): apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=5282 comm="snap-confine" capability=12  capname="net_admin"
kernel: audit: type=1400 audit(1664170061.076:63): apparmor="DENIED" operation="capable" profile="/usr/lib/snapd/snap-confine" pid=5282 comm="snap-confine" capability=38  capname="perfmon"