[Pkg-cups-devel] r553 - in cupsys/branches/cups-1.2-ubuntu/debian: . local

[Martin Pitt]

Author: mpitt
Date: Tue Aug 14 15:14:21 2007
New Revision: 553

Log:
* debian/local/apparmor-profile: Allow unrestricted access to hplip. This
  has not been confined before and unbreaks hplip until we get an actual
  profile for it. (LP: #131470)

Modified:
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Tue Aug 14 15:14:21 2007
@@ -1,3 +1,11 @@
+cupsys (1.2.12-3ubuntu3) gutsy; urgency=low
+
+  * debian/local/apparmor-profile: Allow unrestricted access to hplip. This
+    has not been confined before and unbreaks hplip until we get an actual
+    profile for it. (LP: #131470)
+
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Tue, 14 Aug 2007 17:08:50 +0200
+
 cupsys (1.2.12-3ubuntu2) gutsy; urgency=low
 
   * cupsys.logrotate: Fix last occurence of 'cupsys' user.

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	Tue Aug 14 15:14:21 2007
@@ -33,20 +33,24 @@
   /etc/foomatic/* r,
   /etc/gai.conf r,
   /etc/group r,
+  /etc/papersize r,
   /etc/ssl/** r,
   /proc/net r,
   /proc/net/* r,
   /sys/** r,
+  /usr/bin/env ixr,
   /usr/bin/foomatic* ixr,
   /usr/bin/gs ixr,
   /usr/bin/pdftops ixr,
   /usr/bin/pstops ixr,
   /usr/bin/smbspool ixr,
+  /usr/bin/tee ixr,
   /usr/bin/whoami ixr,
   /usr/lib/** rm,
   /usr/lib/cups/** ixr,
   /usr/lib/cups/backend/cups-pdf Px,
   /usr/local/share/** r,
+  /usr/lib/** r,
   /usr/share/** r,
   /var/cache/cups rw,
   /var/cache/cups/** rw,
@@ -57,8 +61,14 @@
   /var/run/cups/** rw,
   /var/spool/cups rw,
   /var/spool/cups/** rw,
+
+  # FIXME: no policy ATM for hplip
+  /usr/bin/hpijs Ux,
+  /usr/lib/cups/backend/hp Ux,
+  /usr/lib/cups/backend/hpfax Ux,
 }
 
+# separate profile since this needs to write into /home
 /usr/lib/cups/backend/cups-pdf {
   #include <abstractions/base>
   #include <abstractions/fonts>