[Pkg-cups-devel] r643 - in cupsys/branches/cups-1.2-ubuntu: . debian debian/local

[Martin Pitt]

Author: mpitt
Date: Mon Dec  3 10:24:53 2007
New Revision: 643

Log:
* debian/local/apparmor-profile: Run drivers (PPD generators) unconfined,
  since they run as non-root and there are third-party ones we cannot
  control.

Modified:
   cupsys/branches/cups-1.2-ubuntu/   (props changed)
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Mon Dec  3 10:24:53 2007
@@ -1,3 +1,11 @@
+cupsys (1.3.4-2ubuntu2) UNRELEASED; urgency=low
+
+  * debian/local/apparmor-profile: Run drivers (PPD generators) unconfined,
+    since they run as non-root and there are third-party ones we cannot
+    control.
+
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Mon, 03 Dec 2007 11:22:57 +0100
+
 cupsys (1.3.4-2ubuntu1) hardy; urgency=low
 
   * Merge with Debian unstable. Remaining Ubuntu changes:

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	Mon Dec  3 10:24:53 2007
@@ -79,12 +79,12 @@
 
   /usr/lib/cups/cgi-bin/* ixr,
   /usr/lib/cups/daemon/* ixr,
-  /usr/lib/cups/driver/* ixr,
   /usr/lib/cups/monitor/* ixr,
   /usr/lib/cups/notifier/* ixr,
-  # filters are always run as non-root, and there are a lot of
-  # third-party drivers which we cannot predict
+  # filters and drivers (PPD generators) are always run as non-root,
+  # and there are a lot of third-party drivers which we cannot predict
   /usr/lib/cups/filter/* Uxr, 
+  /usr/lib/cups/driver/* Uxr,
   /usr/local/share/** r,
   /usr/share/** r,
   /var/cache/cups/ rw,