[Pkg-cups-devel] Bug#587015: cups-client ignores dpkg-statoverride in postinst

Jonathan D Reed jdreed at MIT.EDU
Thu Jun 24 14:26:30 UTC 2010


Package: cups-client
Version: 1.3.8-1+lenny8
Severity: normal

cups-client does not respect information set by dpkg-statoverride.   We
use dpkg-statoverride to force lppasswd to not be setuid root, however
the cups-client postinst does not look at dpkg-statoverride information,
and forces /usr/bin/lppasswd to be setuid root. 

Before upgrade:
$ dpkg-statoverride --list /usr/bin/lppasswd             
root lpadmin 755 /usr/bin/lppasswd
$ ls -l /usr/bin/lppasswd                                
-rwxr-xr-x 1 root lpadmin 13752 2010-06-18 11:16

After taking an upgrade of cups-client:
$ ls -l /usr/bin/lppasswd                                
-rwsr-xr-x 1 root lpadmin 13752 2010-06-18 11:16


-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)





More information about the Pkg-cups-devel mailing list