[Pkg-cups-devel] r641 - in cupsys/branches/cups-1.2-ubuntu: . debian debian/local debian/local/filters

[Martin Pitt]

Author: mpitt
Date: Mon Dec  3 10:24:47 2007
New Revision: 641

Log:
* debian/local/apparmor-profile: Run bluetooth backend confined again and
  allow opening bluetooth sockets.

Modified:
   cupsys/branches/cups-1.2-ubuntu/   (props changed)
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
   cupsys/branches/cups-1.2-ubuntu/debian/local/filters/oopstops   (contents, props changed)
   cupsys/branches/cups-1.2-ubuntu/debian/local/filters/pdftops   (contents, props changed)
   cupsys/branches/cups-1.2-ubuntu/debian/local/filters/textonly   (contents, props changed)

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Mon Dec  3 10:24:47 2007
@@ -23,8 +23,10 @@
   * debian/local/apparmor-profile: Only restrict backends which are shipped by
     cupsys itself (or known packages like cups-pdf). All other backends remain
     unrestricted, since we cannot predict which privileges they need.
+  * debian/local/apparmor-profile: Run bluetooth backend confined again and
+    allow opening bluetooth sockets.
 
- -- Martin Pitt <martin.pitt at ubuntu.com>  Mon, 03 Dec 2007 09:46:42 +0100
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Mon, 03 Dec 2007 10:01:48 +0100
 
 cupsys (1.3.4-2) unstable; urgency=low
 

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	Mon Dec  3 10:24:47 2007
@@ -27,6 +27,9 @@
   # more
   capability dac_override,
 
+  # the bluetooth backend needs this
+  network bluetooth,
+
   /bin/bash ixr,
   /bin/dash ixr,
   /bin/hostname ixr,
@@ -56,6 +59,7 @@
   /usr/lib/** rm,
 
   # backends which come with CUPS can be confined
+  /usr/lib/cups/backend/bluetooth ixr,
   /usr/lib/cups/backend/dnssd ixr,
   /usr/lib/cups/backend/http ixr,
   /usr/lib/cups/backend/ipp ixr,
@@ -72,9 +76,6 @@
   # third party backends get no restrictions as they often need high
   # privileges and this is beyond our control
   /usr/lib/cups/backend/* Ux,
-  # AA blocks creation of bluetooth sockets without providing a way to
-  # allow them (see LP #172534)
-  /usr/lib/cups/backend/bluetooth Ux,
 
   /usr/lib/cups/cgi-bin/* ixr,
   /usr/lib/cups/daemon/* ixr,

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/filters/oopstops
==============================================================================

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/filters/pdftops
==============================================================================

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/filters/textonly
==============================================================================