[Pkg-cups-devel] r475 - cupsys/trunk/debian
Martin Pitt
mpitt at alioth.debian.org
Mon May 14 07:23:54 UTC 2007
Author: mpitt
Date: Mon May 14 07:23:50 2007
New Revision: 475
Log:
* debian/NEWS: Describe derooting.
Modified:
cupsys/trunk/debian/NEWS
cupsys/trunk/debian/changelog
Modified: cupsys/trunk/debian/NEWS
==============================================================================
--- cupsys/trunk/debian/NEWS (original)
+++ cupsys/trunk/debian/NEWS Mon May 14 07:23:50 2007
@@ -1,12 +1,19 @@
cupsys (1.2.11-1) unstable; urgency=low
- FIXME: pkg-cups team
- describes about daemon owner is changed
- describes about PAM?
- describes about cups-pdf?
- *
+ * The cupsd server process now runs as a system user 'cupsys' instead of
+ root. This limits the potential impact of any vulnerability in cupsd or
+ one of its callouts to the printing configuration and jobs instead of
+ offering a wide open vector for root compromise. This change and the
+ upgrade should be transparent, thus this does not require any
+ configuration change.
+ * The groups of the cupsys system user ensures that cupsd can open parallel
+ and USB printer devices (lp), serial printers (dialout), and
+ printer/scanner combinations (scanner). For out-of-the box usage of the
+ Snakeoil SSL certificate it is also in the ssl-cert group.
+ * This version breaks the current cups-pdf package. A new version of
+ cups-pdf is prepared and will be uploaded soon.
- -- Kenshi Muto <kmuto at debian.org> Sat, 12 May 2007 14:23:13 +0900
+ -- Martin Pitt <mpitt at debian.org> Mon, 14 May 2007 09:18:48 +0200
cupsys (1.2.1-3) unstable; urgency=low
Modified: cupsys/trunk/debian/changelog
==============================================================================
--- cupsys/trunk/debian/changelog (original)
+++ cupsys/trunk/debian/changelog Mon May 14 07:23:50 2007
@@ -103,8 +103,9 @@
ports < 1024 (really silly, but required for RFC compliance).
- debian/cupsys-client.postinst, debian/cupsys.postinst: Set up cupsys
system user.
+ * debian/NEWS: Describe derooting.
- -- Martin Pitt <mpitt at debian.org> Mon, 30 Apr 2007 15:28:14 +0200
+ -- Martin Pitt <mpitt at debian.org> Mon, 14 May 2007 09:23:16 +0200
cupsys (1.2.7-4) unstable; urgency=high
More information about the Pkg-cups-devel
mailing list