Comment 56 for bug 295536

"Px" means "protected by a profile", we ship one for cups-pdf. "Ux" means "unlimited", i. e. there is no AppArmor confinement whatsoever for cups-pdf. See "man apparmor.d".

Indeed you need world-executable permissions on your home directory nowadays (just like with apache, etc.). We install home directories as 755 by default, so this is not a problem in a default installation.