@Tobias, BTW, I would strongly recommend putting AppArmor back -- it protects a number of services including cups, which runs as root still.
@Tobias, BTW, I would strongly recommend putting AppArmor back -- it protects a number of services including cups, which runs as root still.