[Pkg-cups-devel] r544 - in cupsys/branches/cups-1.2-ubuntu/debian: . local

[Martin Pitt]

Author: mpitt
Date: Sat Aug 11 14:44:34 2007
New Revision: 544

Log:
* debian/local/apparmor-profile: Update profile to work with cups-pdf.

Modified:
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Sat Aug 11 14:44:34 2007
@@ -11,8 +11,9 @@
     (LP: #125300)
   * debian/local/apparmor-profile: Unbreak library access (for e. g.
     ghostscript and gutenprint) and allow execution of pdftops and pstops.
+  * debian/local/apparmor-profile: Update profile to work with cups-pdf.
 
- -- Martin Pitt <martin.pitt at ubuntu.com>  Fri, 10 Aug 2007 18:13:30 +0200
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Sat, 11 Aug 2007 16:44:13 +0200
 
 cupsys (1.2.12-3ubuntu1) gutsy; urgency=low
 

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	Sat Aug 11 14:44:34 2007
@@ -45,6 +45,7 @@
   /usr/bin/whoami ixr,
   /usr/lib/** rm,
   /usr/lib/cups/** ixr,
+  /usr/lib/cups/backend/cups-pdf Px,
   /usr/local/share/** r,
   /usr/share/** r,
   /var/cache/cups rw,
@@ -57,3 +58,28 @@
   /var/spool/cups rw,
   /var/spool/cups/** rw,
 }
+
+/usr/lib/cups/backend/cups-pdf {
+  #include <abstractions/base>
+  #include <abstractions/fonts>
+  #include <abstractions/nameservice>
+  #include <abstractions/user-tmp>
+
+  capability chown,
+  capability fowner,
+  capability fsetid,
+  capability setgid,
+  capability setuid,
+
+  /bin/dash ixr,
+  /bin/bash ixr,
+  /etc/cups/cups-pdf.conf r,
+  /home/*/PDF w,
+  /home/*/PDF/* w,
+  /usr/bin/gs ixr,
+  /usr/lib/cups/backend/cups-pdf mr,
+  /usr/lib/ghostscript/** mr,
+  /usr/share/** r,
+  /var/log/cups/cups-pdf_log w,
+  /var/spool/cups-pdf/** rw,
+}