[Pkg-cups-devel] Bug#692791: Last paches for cups as non root

[Martin Pitt]

Bonjour Bastien,

Bastien ROUCARIES [2012-11-24 23:18 +0100]:
> Do you remember what is the last version that support non root on debian ?

It's in the changelog: It was dropped in

cupsys (1.2.12-2) unstable; urgency=low
[...]
  * Drop the derooting changes. It still has some regressions, and with
    upstream not even acknowledging the need for improving cupsys' security we
    will sit on this forever. This will be replaced by an AppArmor/SELinux
    profiles in the future.
    - Drop derooting related patches:
      06_disable_backend_setuid.dpatch
      10_external_pam_helper.dpatch
      09_runasuser.dpatch
      09_runasuser_autoconf.dpatch
    - debian/cupsys{,-client}.postinst: Drop the 'cupsys' user setup and file
      permission juggling.
    - debian/rules:
      + Drop --with-cups-user configure option.
      + Do not modify the upstream default backend permissions.
    - debian/cupsys.init.d: Do not touch log file permissions any more.
    - debian/cupsys.files: Drop cups-check-pam-auth.
    - debian/NEWS: Drop description of derooting changes.
    - debian/control: Drop adduser dependency.

I. e. 1.2.12-1 was the last version. This commit removed the
de-rooting:
http://anonscm.debian.org/gitweb/?p=pkg-cups/cups.git;a=commit;h=716cb660d85f300e687e195549adb5583fee04e0

Martin

-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)