[Pkg-cups-devel] r641 - in cupsys/branches/cups-1.2-ubuntu: . debian debian/local debian/local/filters
Martin Pitt
mpitt at alioth.debian.org
Mon Dec 3 10:24:47 UTC 2007
Author: mpitt
Date: Mon Dec 3 10:24:47 2007
New Revision: 641
Log:
* debian/local/apparmor-profile: Run bluetooth backend confined again and
allow opening bluetooth sockets.
Modified:
cupsys/branches/cups-1.2-ubuntu/ (props changed)
cupsys/branches/cups-1.2-ubuntu/debian/changelog
cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
cupsys/branches/cups-1.2-ubuntu/debian/local/filters/oopstops (contents, props changed)
cupsys/branches/cups-1.2-ubuntu/debian/local/filters/pdftops (contents, props changed)
cupsys/branches/cups-1.2-ubuntu/debian/local/filters/textonly (contents, props changed)
Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog (original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog Mon Dec 3 10:24:47 2007
@@ -23,8 +23,10 @@
* debian/local/apparmor-profile: Only restrict backends which are shipped by
cupsys itself (or known packages like cups-pdf). All other backends remain
unrestricted, since we cannot predict which privileges they need.
+ * debian/local/apparmor-profile: Run bluetooth backend confined again and
+ allow opening bluetooth sockets.
- -- Martin Pitt <martin.pitt at ubuntu.com> Mon, 03 Dec 2007 09:46:42 +0100
+ -- Martin Pitt <martin.pitt at ubuntu.com> Mon, 03 Dec 2007 10:01:48 +0100
cupsys (1.3.4-2) unstable; urgency=low
Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile (original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile Mon Dec 3 10:24:47 2007
@@ -27,6 +27,9 @@
# more
capability dac_override,
+ # the bluetooth backend needs this
+ network bluetooth,
+
/bin/bash ixr,
/bin/dash ixr,
/bin/hostname ixr,
@@ -56,6 +59,7 @@
/usr/lib/** rm,
# backends which come with CUPS can be confined
+ /usr/lib/cups/backend/bluetooth ixr,
/usr/lib/cups/backend/dnssd ixr,
/usr/lib/cups/backend/http ixr,
/usr/lib/cups/backend/ipp ixr,
@@ -72,9 +76,6 @@
# third party backends get no restrictions as they often need high
# privileges and this is beyond our control
/usr/lib/cups/backend/* Ux,
- # AA blocks creation of bluetooth sockets without providing a way to
- # allow them (see LP #172534)
- /usr/lib/cups/backend/bluetooth Ux,
/usr/lib/cups/cgi-bin/* ixr,
/usr/lib/cups/daemon/* ixr,
Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/filters/oopstops
==============================================================================
Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/filters/pdftops
==============================================================================
Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/filters/textonly
==============================================================================
More information about the Pkg-cups-devel
mailing list