[Pkg-cups-devel] Bug#582942: CUPS permissions on /usr/lib/cups/backend

[Mark Purcell]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585153#24

From: Martin-Éric Racine <q-funk at iki.fi>
To: Dale and Cheryl Schroeder <dale at texasbb.com>, 585153-done at bugs.debian.org
Subject: Re: [Pkg-cups-devel] Bug#585153: cups-pdf: Sets too restrictive 
        permissions on /usr/lib/cups/backend
Date: Sat, 19 Jun 2010 21:48:53 +0300

On Sat, Jun 19, 2010 at 8:29 PM, Dale and Cheryl Schroeder
<dale at texasbb.com> wrote:
> I also noticed the restrictive permissions and then found this bug report.
> Changing the permissions back to 755 does allow printing to work again,
> but the changelog considers this a fix.  More explanation on why this is
> necessary would be welcome.

A number of people have reported persistent warnings about insecure
permissions in CUPS logs. Various discussions on the Internet suggest
that the solution would be to make the back-end directory's
permissions more restrictive. Sadly, while this indeed makes the
warnings in the CUPS logs disappear, it also has the sad side-effect
of disturbing the operation of other CUPS back-ends.

Anyhow, I've discussed the situation with the rest of the CUPS team
and we came to the conclusion that reverting this change and letting
CUPS fix the permissions itself in postinst would make more sense.
I've already uploaded a new cups-pdf that reflects these changes. The
only part that remains is for CUPS to fix the permissions.

Martin-Éric
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-cups-devel/attachments/20100627/1b3cba9f/attachment.pgp>