[Pkg-cups-devel] r475 - cupsys/trunk/debian

[Martin Pitt]

Author: mpitt
Date: Mon May 14 07:23:50 2007
New Revision: 475

Log:
* debian/NEWS: Describe derooting.

Modified:
   cupsys/trunk/debian/NEWS
   cupsys/trunk/debian/changelog

Modified: cupsys/trunk/debian/NEWS
==============================================================================
--- cupsys/trunk/debian/NEWS	(original)
+++ cupsys/trunk/debian/NEWS	Mon May 14 07:23:50 2007
@@ -1,12 +1,19 @@
 cupsys (1.2.11-1) unstable; urgency=low
 
-  FIXME: pkg-cups team
-   describes about daemon owner is changed
-   describes about PAM?
-   describes about cups-pdf?
-  * 
+  * The cupsd server process now runs as a system user 'cupsys' instead of
+    root. This limits the potential impact of any vulnerability in cupsd or
+    one of its callouts to the printing configuration and jobs instead of
+    offering a wide open vector for root compromise. This change and the
+    upgrade should be transparent, thus this does not require any
+    configuration change.
+  * The groups of the cupsys system user ensures that cupsd can open parallel
+    and USB printer devices (lp), serial printers (dialout), and
+    printer/scanner combinations (scanner). For out-of-the box usage of the
+    Snakeoil SSL certificate it is also in the ssl-cert group.
+  * This version breaks the current cups-pdf package. A new version of
+    cups-pdf is prepared and will be uploaded soon.
 
- -- Kenshi Muto <kmuto at debian.org>  Sat, 12 May 2007 14:23:13 +0900
+ -- Martin Pitt <mpitt at debian.org>  Mon, 14 May 2007 09:18:48 +0200
 
 cupsys (1.2.1-3) unstable; urgency=low
 

Modified: cupsys/trunk/debian/changelog
==============================================================================
--- cupsys/trunk/debian/changelog	(original)
+++ cupsys/trunk/debian/changelog	Mon May 14 07:23:50 2007
@@ -103,8 +103,9 @@
       ports < 1024 (really silly, but required for RFC compliance).
     - debian/cupsys-client.postinst, debian/cupsys.postinst: Set up cupsys
       system user.
+  * debian/NEWS: Describe derooting.
 
- -- Martin Pitt <mpitt at debian.org>  Mon, 30 Apr 2007 15:28:14 +0200
+ -- Martin Pitt <mpitt at debian.org>  Mon, 14 May 2007 09:23:16 +0200
 
 cupsys (1.2.7-4) unstable; urgency=high