[Pkg-cups-devel] r339 - cupsys/branches/cups-1.2-ubuntu/debian

[Martin Pitt]

Author: mpitt
Date: Wed Jul 26 16:14:57 2006
New Revision: 339

Modified:
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/cupsys.postinst

Log:
* debian/cupsys.postinst: Remove cupsys from the shadow group on upgrades,
  so that users who previously enabled the web interface get the benefit of
  privilege separation as well.

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Wed Jul 26 16:14:57 2006
@@ -13,8 +13,11 @@
   * Remove debian/patches/ubuntu-nowebadmin.dpatch, remove explanation of
     disabled web interface from debian/README.Debian. This version enables the
     web interface by default. Closes: LP#50886
+  * debian/cupsys.postinst: Remove cupsys from the shadow group on upgrades,
+    so that users who previously enabled the web interface get the benefit of
+    privilege separation as well.
 
- -- Martin Pitt <martin.pitt at ubuntu.com>  Wed, 26 Jul 2006 17:58:00 +0200
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Wed, 26 Jul 2006 18:11:22 +0200
 
 cupsys (1.2.2-0ubuntu1) edgy; urgency=low
 

Modified: cupsys/branches/cups-1.2-ubuntu/debian/cupsys.postinst
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/cupsys.postinst	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/cupsys.postinst	Wed Jul 26 16:14:57 2006
@@ -238,6 +238,12 @@
 	if dpkg --compare-versions "$2" lt "1.2.1-2ubuntu3"; then
 	    rm -f /etc/rc0.d/K19cupsys /etc/rc6.d/K19cupsys
 	fi
+
+	# remove shadow privilege from cupsys (admins might have manually added
+	# cupsys to shadow to enable the web interface in earlier versions)
+	if dpkg --compare-versions "$2" le-nl "1.2.2-0ubuntu2"; then
+	    deluser --quiet cupsys shadow 2>/dev/null || true
+	fi
     ;;
 
     abort-upgrade|abort-remove|abort-deconfigure)