[Pkg-cups-devel] Bug#613142: /etc/cups directory should be owned by group lpadmin, not group lp

[Paul]

Package: cups
Version: 1.4.5-3
Severity: normal

Hello,

I propose the following change.

>From this:
    drwxr-xr-x 4 root lp 4096 Feb 13 08:35 /etc/cups/
To this:
    drwxr-xr-x 4 root lpadmin 4096 Feb 13 08:35 /etc/cups/


Following is my rationale:

/usr/share/doc/base-passwd/users-and-groups.html specifies that the
'lpadmin' group as being able to administer printers.  On the other
hand, the 'lp' group has direct access to parallel ports, printer
spools, etc.

Since /etc/cups contains configuration files it is better suited to
group ownership by the 'lpadmin' group.

Currently the CUPS web-based administration area is administered by
anyone in the lpadmin group.  Making this change means to those same
people can effect similar changes using a text editor - without having
to invoke root privileges.

Thanks,
P.


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cups depends on:
ii  adduser                 3.112+nmu2       add and remove users and groups
ii  bc                      1.06.95-2        The GNU bc arbitrary precision cal
ii  cups-client             1.4.5-3          Common UNIX Printing System(tm) - 
ii  cups-common             1.4.5-3          Common UNIX Printing System(tm) - 
ii  cups-ppdc               1.4.5-3          Common UNIX Printing System(tm) - 
ii  debconf [debconf-2.0]   1.5.38           Debian configuration management sy
ii  ghostscript             8.71~dfsg2-10    The GPL Ghostscript PostScript/PDF
ii  libavahi-client3        0.6.28-3         Avahi client library
ii  libavahi-common3        0.6.28-3         Avahi common library
ii  libc6                   2.11.2-11        Embedded GNU C Library: Shared lib
ii  libcups2                1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupscgi1             1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsdriver1          1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsimage2           1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsmime1            1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsppdc1            1.4.5-3          Common UNIX Printing System(tm) - 
ii  libdbus-1-3             1.4.1-2          simple interprocess messaging syst
ii  libgcc1                 1:4.4.5-10       GCC support library
ii  libgnutls26             2.10.4-2         the GNU TLS library - runtime libr
ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime libraries - k
ii  libijs-0.35             0.35-7           IJS raster image transport protoco
ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime libraries
ii  liblcms1                1.18.dfsg-1.2+b3 Color management library
ii  libldap-2.4-2           2.4.23-7         OpenLDAP libraries
ii  libpam0g                1.1.1-6.1        Pluggable Authentication Modules l
ii  libpaper1               1.1.24           library for handling paper charact
ii  libpoppler5             0.12.4-1.2       PDF rendering library
ii  libslp1                 1.2.1-7.8        OpenSLP libraries
ii  libstdc++6              4.4.5-10         The GNU Standard C++ Library v3
ii  libusb-0.1-4            2:0.1.12-17      userspace USB programming library
ii  lsb-base                3.2-27           Linux Standard Base 3.2 init scrip
ii  poppler-utils           0.12.4-1.2       PDF utilitites (based on libpopple
ii  procps                  1:3.2.8-10       /proc file system utilities
ii  ssl-cert                1.0.28           simple debconf wrapper for OpenSSL
ii  ttf-freefont            20100919-1       Freefont Serif, Sans and Mono True
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages cups recommends:
ii  avahi-daemon               0.6.28-3      Avahi mDNS/DNS-SD daemon
ii  cups-driver-gutenprint     5.2.6-1       printer drivers for CUPS
ii  foomatic-filters           4.0.6-1       OpenPrinting printer support - fil
ii  ghostscript-cups           8.71~dfsg2-10 The GPL Ghostscript PostScript/PDF

Versions of packages cups suggests:
ii  cups-bsd                  1.4.5-3        Common UNIX Printing System(tm) - 
pn  cups-pdf                  <none>         (no description available)
ii  foomatic-db               20110209-1     OpenPrinting printer support - dat
pn  hplip                     <none>         (no description available)
ii  smbclient                 2:3.5.6~dfsg-5 command-line SMB/CIFS clients for 
ii  udev                      165-1          /dev/ and hotplug management daemo

-- debconf information:
  cupsys/raw-print: true
  cupsys/backend: ipp, lpd, parallel, scsi, serial, socket, usb, snmp, dnssd