402020 – Okular creates temporary files with wrong permissions and cannot print

Bug 402020 - Okular creates temporary files with wrong permissions and cannot print

Summary: Okular creates temporary files with wrong permissions and cannot print

Status:	REPORTED

Alias:	None

Product:	okular
Classification:	Applications
Component:	printing (show other bugs)
Version:	1.3.2
Platform:	Debian unstable Linux

Importance:	NOR normal
Target Milestone:	---
Assignee:	Okular developers

URL:
Keywords:

Depends on:
Blocks:

Reported:	2018-12-11 20:24 UTC by pikku42
Modified:	2019-02-18 13:07 UTC (History)
CC List:	3 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.

Description pikku42 2018-12-11 20:24:26 UTC

SUMMARY


STEPS TO REPRODUCE
1. Open a PDF file in Okular
2. Select File -> Print (to any printer)

OBSERVED RESULT
File does not print. No error messages are produced in GUI. In terminal Okular outputs "/usr/bin/lpr: Error - unable to access "/tmp/okular_kpTnys.ps" - Permission denied".
The file /tmp/okular_kpTnys.ps is created with the following permissions:
---------- 1 pikku pikku 5998450 dec 11 21:13 /tmp/okular_kpTnys.ps
The same PDF file prints OK from Evince. Printing also works OK from other KDE apps.
If I catch the file and chmod it to 777 upon creation with inotifywait, the PDF prints OK.

EXPECTED RESULT
The temporary file is created readable, lpr can read it and prints it to the selected printer.

SOFTWARE/OS VERSIONS
Operating System: Debian GNU/Linux 
KDE Plasma Version: 5.14.3
Qt Version: 5.11.2
KDE Frameworks Version: 5.51.0
Kernel Version: 4.18.0-1-amd64
OS Type: 64-bit
Processors: 4 × Intel® Core™ i3-3225 CPU @ 3.30GHz
Memory: 15.4 GiB of RAM

Comment 1 Albert Astals Cid 2018-12-12 23:08:11 UTC

My vote goes to: Your tmp filesystem is broken.

Since the code for printing has not changed in years and you're the first person with this problem.

I doubt i'll put any time on this, but which kind of tmp filesystem to do you use? which are the permissions of /tmp ? And any other thing you can think of.

Comment 2 pikku42 2019-01-11 19:56:22 UTC

(In reply to Albert Astals Cid from comment #1)
> My vote goes to: Your tmp filesystem is broken.
> 
> Since the code for printing has not changed in years and you're the first
> person with this problem.
> 
> I doubt i'll put any time on this, but which kind of tmp filesystem to do
> you use? which are the permissions of /tmp ? And any other thing you can
> think of.

Thanks for the reply. My /tmp is on the root of /dev/sda2 as ext4 and 
has these permissions:
drwxrwxrwt  21 root root       12288 dec 13 20:05 tmp
The system umask is 0022 as per default.
If I touch a file in /tmp from a terminal (or Dolphin or any other app 
for that matter) as a user it gets the correct permissions:
-rw-r--r-- 1 pikku pikku 0 dec 13 20:05 /tmp/jeee
As the owner of the file I can write to it and delete it.

If I try to print with Okular the temporary file gets these permissions:
---------- 1 pikku pikku 5998450 dec 13 20:09 /tmp/okular_pvmIYb.ps
and it lpr reports this on console:
/usr/bin/lpr: Error - unable to access "/tmp/okular_pvmIYb.ps" - 
Permission denied
To work around this I can have the following running whenever I need to 
print from Okular:
inotifywait -mrq -e CREATE --format %w%f /tmp/ | while IFS= read -r 
FILE; do chmod 777 "$FILE"; done &

My first thought was that there's something wrong with the /tmp but as 
far as I can tell everything is as it should be. Other programs don't 
seem to have problems with writing to/reading from /tmp. I get this 
behaviour only from Okular. Other KDE/Qt apps (just tested Konsole, 
Kate, KWrite, Kig and Konqueror) print normally.
I found this thread: https://bbs.archlinux.org/viewtopic.php?id=236004 
where the OP describes similar behaviour but in all apps and having to 
reinstall them to get them working again wihout knowing what the problem 
was.

In the meantime I have also found out that Okular is unable to save any open file (it gives a message like "File could not be saved in '/tmp/okular.xWxCSb'. Try to save it to another location.", although the selected file name for saving was "/home/pikku/test.pdf").

Investigating a bit further with audit brought me to this (note that the files apparently created by printer driver have mode 600, while the last one (/tmp/okular_KrPKrq.ps) has mode 000:
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.646:84986): proctitle="okular"
type=PATH msg=audit(1547235776.646:84986): item=1 name="/tmp/05d7e5c42e192" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.646:84986): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.646:84986): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.646:84986): arch=c000003e syscall=2 success=yes exit=17 a0=7ffd1d84abc0 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.646:84987): proctitle="okular"
type=PATH msg=audit(1547235776.646:84987): item=0 name="/tmp/05d7e5c42e192" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.646:84987): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.646:84987): arch=c000003e syscall=2 success=yes exit=16 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.650:84988): proctitle="okular"
type=PATH msg=audit(1547235776.650:84988): item=1 name="/tmp/05d7e5c42e192" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.650:84988): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.650:84988): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.650:84988): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.650:84989): proctitle="okular"
type=PATH msg=audit(1547235776.650:84989): item=1 name="/tmp/05d7e5c42f149" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.650:84989): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.650:84989): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.650:84989): arch=c000003e syscall=2 success=yes exit=17 a0=7ffd1d84aba0 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.650:84990): proctitle="okular"
type=PATH msg=audit(1547235776.650:84990): item=0 name="/tmp/05d7e5c42f149" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.650:84990): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.650:84990): arch=c000003e syscall=2 success=yes exit=16 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.654:84991): proctitle="okular"
type=PATH msg=audit(1547235776.654:84991): item=1 name="/tmp/05d7e5c42f149" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.654:84991): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.654:84991): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.654:84991): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.686:84992): proctitle="okular"
type=PATH msg=audit(1547235776.686:84992): item=1 name="/tmp/05d7e5c437a7e" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.686:84992): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.686:84992): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.686:84992): arch=c000003e syscall=2 success=yes exit=19 a0=7ffd1d84abd0 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.686:84993): proctitle="okular"
type=PATH msg=audit(1547235776.686:84993): item=0 name="/tmp/05d7e5c437a7e" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.686:84993): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.686:84993): arch=c000003e syscall=2 success=yes exit=18 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.686:84994): proctitle="okular"
type=PATH msg=audit(1547235776.686:84994): item=1 name="/tmp/05d7e5c437a7e" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.686:84994): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.686:84994): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.686:84994): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.690:84995): proctitle="okular"
type=PATH msg=audit(1547235776.690:84995): item=1 name="/tmp/05d7e5c4389e5" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.690:84995): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.690:84995): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.690:84995): arch=c000003e syscall=2 success=yes exit=19 a0=7ffd1d84a9c0 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.690:84996): proctitle="okular"
type=PATH msg=audit(1547235776.690:84996): item=0 name="/tmp/05d7e5c4389e5" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.690:84996): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.690:84996): arch=c000003e syscall=2 success=yes exit=18 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:56 2019
type=PROCTITLE msg=audit(1547235776.690:84997): proctitle="okular"
type=PATH msg=audit(1547235776.690:84997): item=1 name="/tmp/05d7e5c4389e5" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235776.690:84997): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235776.690:84997): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235776.690:84997): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.498:84998): proctitle="okular"
type=PATH msg=audit(1547235778.498:84998): item=1 name="/tmp/05d7e5c40a595" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.498:84998): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.498:84998): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.498:84998): arch=c000003e syscall=2 success=yes exit=19 a0=7ffd1d849bf0 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.502:84999): proctitle="okular"
type=PATH msg=audit(1547235778.502:84999): item=0 name="/tmp/05d7e5c40a595" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.502:84999): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.502:84999): arch=c000003e syscall=2 success=yes exit=18 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.502:85000): proctitle="okular"
type=PATH msg=audit(1547235778.502:85000): item=1 name="/tmp/05d7e5c40a595" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.502:85000): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.502:85000): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.502:85000): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.518:85001): proctitle="okular"
type=PATH msg=audit(1547235778.518:85001): item=1 name="/tmp/05d7e5c40efb6" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.518:85001): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.518:85001): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.518:85001): arch=c000003e syscall=2 success=yes exit=19 a0=7ffd1d84aa50 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.518:85002): proctitle="okular"
type=PATH msg=audit(1547235778.518:85002): item=0 name="/tmp/05d7e5c40efb6" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.518:85002): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.518:85002): arch=c000003e syscall=2 success=yes exit=18 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.522:85003): proctitle="okular"
type=PATH msg=audit(1547235778.522:85003): item=1 name="/tmp/05d7e5c40efb6" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.522:85003): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.522:85003): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.522:85003): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.522:85004): proctitle="okular"
type=PATH msg=audit(1547235778.522:85004): item=1 name="/tmp/05d7e5c40fc89" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.522:85004): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.522:85004): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.522:85004): arch=c000003e syscall=2 success=yes exit=19 a0=7ffd1d84aa30 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.522:85005): proctitle="okular"
type=PATH msg=audit(1547235778.522:85005): item=0 name="/tmp/05d7e5c40fc89" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.522:85005): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.522:85005): arch=c000003e syscall=2 success=yes exit=18 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.522:85006): proctitle="okular"
type=PATH msg=audit(1547235778.522:85006): item=1 name="/tmp/05d7e5c40fc89" inode=136220 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.522:85006): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.522:85006): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.522:85006): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.526:85007): proctitle="okular"
type=PATH msg=audit(1547235778.526:85007): item=0 name="/tmp" inode=136220 dev=08:02 mode=0100000 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.526:85007): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.526:85007): arch=c000003e syscall=2 success=yes exit=18 a0=561711f36448 a1=490002 a2=0 a3=7f59ea89bc40 items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.526:85008): proctitle="okular"
type=PATH msg=audit(1547235778.526:85008): item=2 name="/tmp/okular_KrPKrq.ps" inode=136220 dev=08:02 mode=0100000 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.526:85008): item=1 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.526:85008): item=0 name="/proc/self/fd/18" inode=136220 dev=08:02 mode=0100000 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.526:85008): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.526:85008): arch=c000003e syscall=265 success=yes exit=0 a0=ffffff9c a1=561711f36888 a2=ffffff9c a3=561711f36448 items=3 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.558:85009): proctitle="okular"
type=PATH msg=audit(1547235778.558:85009): item=1 name="/tmp/05d7e5c4186de" inode=136445 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.558:85009): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.558:85009): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.558:85009): arch=c000003e syscall=2 success=yes exit=20 a0=7ffd1d84a8b0 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.558:85010): proctitle="okular"
type=PATH msg=audit(1547235778.558:85010): item=0 name="/tmp/05d7e5c4186de" inode=136445 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.558:85010): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.558:85010): arch=c000003e syscall=2 success=yes exit=19 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.558:85011): proctitle="okular"
type=PATH msg=audit(1547235778.558:85011): item=1 name="/tmp/05d7e5c4186de" inode=136445 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.558:85011): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.558:85011): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.558:85011): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.562:85012): proctitle="okular"
type=PATH msg=audit(1547235778.562:85012): item=1 name="/tmp/05d7e5c419621" inode=136445 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.562:85012): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.562:85012): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.562:85012): arch=c000003e syscall=2 success=yes exit=20 a0=7ffd1d84a890 a1=200c2 a2=180 a3=0 items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.562:85013): proctitle="okular"
type=PATH msg=audit(1547235778.562:85013): item=0 name="/tmp/05d7e5c419621" inode=136445 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.562:85013): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.562:85013): arch=c000003e syscall=2 success=yes exit=19 a0=561711e6b9cc a1=0 a2=0 a3=34ef items=1 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.562:85014): proctitle="okular"
type=PATH msg=audit(1547235778.562:85014): item=1 name="/tmp/05d7e5c419621" inode=136445 dev=08:02 mode=0100600 ouid=1001 ogid=1002 rdev=00:00 nametype=DELETE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.562:85014): item=0 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.562:85014): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.562:85014): arch=c000003e syscall=87 success=yes exit=0 a0=561711e6b9cc a1=7f59ea89bca0 a2=0 a3=20af items=2 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)
----
time->Fri Jan 11 20:42:58 2019
type=PROCTITLE msg=audit(1547235778.526:85008): proctitle="okular"
type=PATH msg=audit(1547235778.526:85008): item=2 name="/tmp/okular_KrPKrq.ps" inode=136220 dev=08:02 mode=0100000 ouid=1001 ogid=1002 rdev=00:00 nametype=CREATE cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.526:85008): item=1 name="/tmp/" inode=131073 dev=08:02 mode=041777 ouid=0 ogid=0 rdev=00:00 nametype=PARENT cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PATH msg=audit(1547235778.526:85008): item=0 name="/proc/self/fd/18" inode=136220 dev=08:02 mode=0100000 ouid=1001 ogid=1002 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=CWD msg=audit(1547235778.526:85008): cwd="/home/pikku"
type=SYSCALL msg=audit(1547235778.526:85008): arch=c000003e syscall=265 success=yes exit=0 a0=ffffff9c a1=561711f36888 a2=ffffff9c a3=561711f36448 items=3 ppid=23923 pid=23934 auid=1001 uid=1001 gid=1002 euid=1001 suid=1001 fsuid=1001 egid=1002 sgid=1002 fsgid=1002 tty=pts2 ses=9 comm="okular" exe="/usr/bin/okular" subj==unconfined key=(null)

Comment 3 lkittler 2019-02-18 13:07:43 UTC

I checked strace for printing with okular and I saw that the ps file is created in /proc/<userid>/fd with access code 0 and then do a linkat on /tmp/*ps.
I can print if I start printing by "firejail okular".