OpenCSW Bug Tracker


Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0004649 [cupsd] regular use minor always 2010-12-27 18:48 2013-07-08 15:47
Reporter flod View Status public  
Assigned To cgrzemba
Priority normal Resolution fixed  
Status closed  
Summary 0004649: cupsd changes group ownership of various working directories
Description When starting cups, the group ownership of some directories get set to lp.

A simple start changes ownership for at least:
/var/opt/csw/run/cups/certs (user)
/var/opt/csw/cache/cups
/var/opt/csw/cache/cups/rss
/var/opt/csw/log/cups/error_log
/var/opt/csw/run/cups
/var/opt/csw/spool/cups
/var/opt/csw/spool/cups/tmp

But these directories are in the package repository with "bin" as group. Evaluating the installation (e.g. with pkgchk) shows errors at least for:
ERROR: /etc/opt/csw/cups
ERROR: /etc/opt/csw/cups/ppd
ERROR: /etc/opt/csw/cups/ssl
ERROR: /var/opt/csw/cache/cups
ERROR: /var/opt/csw/cache/cups/rss
ERROR: /var/opt/csw/run/cups
ERROR: /var/opt/csw/run/cups/certs
ERROR: /var/opt/csw/spool/cups
ERROR: /var/opt/csw/spool/cups/tmp

package revisions:
CSWcups 1.4.5,REV=2010.12.24 SAME
CSWcupsclient 1.4.5,REV=2010.12.24 SAME
CSWcupsd 1.4.5,REV=2010.12.24 SAME
CSWcupsdoc 1.4.5,REV=2010.12.24 SAME
CSWlibcups 1.4.5,REV=2010.12.24 SAME
CSWlibcups2 1.4.5,REV=2010.12.24 SAME
CSWlibcupscgi1 1.4.5,REV=2010.12.24 SAME
CSWlibcupsdriver1 1.4.5,REV=2010.12.24 SAME
CSWlibcupsimage2 1.4.5,REV=2010.12.24 SAME
CSWlibcupsmime1 1.4.5,REV=2010.12.24 SAME
CSWlibcupsppdc1 1.4.5,REV=2010.12.24 SAME
Additional Information cupsd runs as root. Are there some security measures configured at compile time?
Would it be possible to switch the cups installation to a non-root user (with privileges)?
Tags No tags attached.
Attached Files

- Relationships

-  Notes
(0008642)
maciej (reporter)
2010-12-29 14:05

I've updated the package to ship all directories under /etc and /var with group lp. Can you test?

http://buildfarm.opencsw.org/experimental.html#cups [^]

pkgutil -t http://buildfarm.opencsw.org/opencsw/experimental/cups [^] -y -i cups
(0008643)
flod (reporter)
2010-12-29 16:48

"/var/opt/csw/cache" collides at least with CSWfconfig.

grep "/var/opt/csw/cache" /var/sadm/install/contents
/var/opt/csw/cache d none 0755 root lp CSWfconfig CSWcupsd
/var/opt/csw/cache/cups d none 0755 root lp CSWcupsd
/var/opt/csw/cache/cups/rss d none 0755 root lp CSWcupsd
/var/opt/csw/cache/fontconfig d none 0755 root bin CSWfconfig
(0008651)
maciej (reporter)
2011-01-02 16:38

Testing for ownerships and groups will require some schema changes to the checkpkg database. I would like to solve the larger problem while I'm at it. I'll need some time to modify checkpkg.
(0010478)
cgrzemba (manager)
2013-07-08 15:47

fixed in cupsd-1.5.4,REV=2013.07.08


Copyright © 2000 - 2008 Mantis Group
Powered by Mantis Bugtracker