[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1006183: cups-browsed: Provide apparmor rule for cups-browsed-debian-edu.conf as shipped on Debian Edu systems

Package: cups-browsed
Severity: wishlist
Version: 1.28.11-2
Control: found -1 2.3.3op2-3+deb11u1
X-Debbugs-Cc: debian-edu@lists.debian.org
User: debian-edu@lists.debian.org
Usertags: debian-edu
Tags: patch

Dear CUPS maintainers,

on Debian Edu we face a problem with /etc/apparmor.d/usr.sbin.cups-browsed as shipped in cups-browsed bin:pkg (see [1] for details). The problem is specific to Debian Edu, but it would be really cool to get the most appropriate fix for this into bin:pkg cups-browsed itself.

The problem: in Debian Edu, we move /etc/cups/cups-browsed.conf out of the way and replace it by a symlink that points to /etc/cups/cups-browsed-debian-edu.conf. In Debian Edu, we do this for several files in /etc/ when provisioning an adjusted Debian Edu server or workstation. Unfortunately, since Debian Edu 11, the file /etc/cups/cups-browsed-debian-edu.conf does not get read anymore due to apparmor denying this file from being read.

The request that we ask form the printing team is this: Can you please allow cups-browsed to read from /etc/cups/cups-browsed-debian-edu.conf? A patch for this is attached to this bug report.

Of course, the conffile manipulation approach in Debian Edu is debatable, but shall not be our concern in this bug. (See #311188 if you want to chime in on that topic).


[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1005813

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net

diff -Nru cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed
--- cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed	2022-01-22 12:19:51.000000000 +0100
+++ cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed	2022-02-20 19:51:07.000000000 +0100
@@ -17,6 +17,9 @@
   /var/log/cups/* rw,
   /tmp/** rw,
+  # Courtesy to the Debian Edu team...
+  /etc/cups/cups-browsed-debian-edu.conf r,
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.cups-browsed>
diff -Nru cups-filters-1.28.11/debian/changelog cups-filters-1.28.11/debian/changelog
--- cups-filters-1.28.11/debian/changelog	2022-01-22 12:19:51.000000000 +0100
+++ cups-filters-1.28.11/debian/changelog	2022-02-20 19:51:15.000000000 +0100
@@ -1,3 +1,12 @@
+cups-filters (1.28.11-2.1) UNRELEASED; urgency=medium
+  * Non-maintainer upload.
+  * debian/apparmor/usr.sbin.cups-browsed: Allow reading from Debian Edu's
+    cups-browsed config file (/etc/cups/cups-browsed-debian-edu.conf).
+    (Closes: -1).
+ -- Mike Gabriel <sunweaver@debian.org>  Sun, 20 Feb 2022 19:51:15 +0100
 cups-filters (1.28.11-2) unstable; urgency=medium
   * debian/control: lynx has to be handled different in Debian and Ubuntu

Attachment: pgpV1iTmjpwHr.pgp
Description: Digitale PGP-Signatur

Reply to: