[Pkg-cups-devel] r554 - in cupsys/branches/cups-1.2-ubuntu/debian: . local

[Martin Pitt]

Author: mpitt
Date: Tue Aug 14 16:31:19 2007
New Revision: 554

Log:
* debian/local/apparmor-profile: Some more updates to work with third-party
  printer drivers (also under /opt).

Modified:
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Tue Aug 14 16:31:19 2007
@@ -1,3 +1,10 @@
+cupsys (1.2.12-3ubuntu4) UNRELEASED; urgency=low
+
+  * debian/local/apparmor-profile: Some more updates to work with third-party
+    printer drivers (also under /opt).
+
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Tue, 14 Aug 2007 18:30:42 +0200
+
 cupsys (1.2.12-3ubuntu3) gutsy; urgency=low
 
   * debian/local/apparmor-profile: Allow unrestricted access to hplip. This

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	Tue Aug 14 16:31:19 2007
@@ -38,19 +38,14 @@
   /proc/net r,
   /proc/net/* r,
   /sys/** r,
-  /usr/bin/env ixr,
-  /usr/bin/foomatic* ixr,
-  /usr/bin/gs ixr,
-  /usr/bin/pdftops ixr,
-  /usr/bin/pstops ixr,
-  /usr/bin/smbspool ixr,
-  /usr/bin/tee ixr,
-  /usr/bin/whoami ixr,
+  /usr/bin/* ixr,
+  /usr/sbin/* ixr,
+  /bin/* ixr,
+  /sbin/* ixr,
   /usr/lib/** rm,
   /usr/lib/cups/** ixr,
   /usr/lib/cups/backend/cups-pdf Px,
   /usr/local/share/** r,
-  /usr/lib/** r,
   /usr/share/** r,
   /var/cache/cups rw,
   /var/cache/cups/** rw,
@@ -62,6 +57,9 @@
   /var/spool/cups rw,
   /var/spool/cups/** rw,
 
+  # third-party printer drivers; no known structure here
+  /opt/** rix,
+
   # FIXME: no policy ATM for hplip
   /usr/bin/hpijs Ux,
   /usr/lib/cups/backend/hp Ux,