Bug#415872: [Pkg-cups-devel] Bug#415872: cupsys: ipp and lpd backend files are not world-readable

[Kenshi Muto <kmuto@debian.org>]

severity 415872 important
merge 399572 415872
tags 399572 + confirmed
thanks

At Thu, 22 Mar 2007 21:38:16 +0200,
=?UTF-8?Q? Martin-=C3=89ric?= Racine wrote:
> On 3/22/07, Laurent Bonnaud <Laurent.Bonnaud@inpg.fr> wrote:
> > Package: cupsys
> > Version: 1.2.7-4
> > Severity: normal
> >
> > here is the problem:
> > -rwx------ 3 root root 23452 fév  2 14:20 /usr/lib/cups/backend-available/ipp
> > -rwx------ 2 root root 16648 fév  2 14:20 /usr/lib/cups/backend-available/lpd
> > There is no good reason to make those files unreadable by users and it
> > causes a problem when reporting bugs against cupsys:

This is a known problem (#399572) but this permission is the specification
of upstream code. If we give a+r permission, these backends won't work.

> kmuto, mpitt: should we make these root:lp 4754 then? Or any other mode?

During CUPS is working under root owner, I don't want to do such
not necessary configuration. Another idea is that using copy instead of
hardlink in postinst then setting permission 700.
But it seems be too late to merge it for Etch and we CUPS team is
planning to migrate Ubuntu-based cupsys for post-Etch.

Thanks,
-- 
Kenshi Muto
kmuto@debian.org