[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#613142: marked as done (/etc/cups directory should be owned by group lpadmin, not group lp)



Your message dated Wed, 8 Mar 2017 19:42:05 +0000
with message-id <08032017193557.b269b926773a@desktop.copernicus.org.uk>
and subject line Re: Bug#613142: /etc/cups directory should be owned by group lpadmin, not group lp
has caused the Debian Bug report #613142,
regarding /etc/cups directory should be owned by group lpadmin, not group lp
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
613142: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=613142
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: cups
Version: 1.4.5-3
Severity: normal

Hello,

I propose the following change.

>From this:
    drwxr-xr-x 4 root lp 4096 Feb 13 08:35 /etc/cups/
To this:
    drwxr-xr-x 4 root lpadmin 4096 Feb 13 08:35 /etc/cups/


Following is my rationale:

/usr/share/doc/base-passwd/users-and-groups.html specifies that the
'lpadmin' group as being able to administer printers.  On the other
hand, the 'lp' group has direct access to parallel ports, printer
spools, etc.

Since /etc/cups contains configuration files it is better suited to
group ownership by the 'lpadmin' group.

Currently the CUPS web-based administration area is administered by
anyone in the lpadmin group.  Making this change means to those same
people can effect similar changes using a text editor - without having
to invoke root privileges.

Thanks,
P.


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cups depends on:
ii  adduser                 3.112+nmu2       add and remove users and groups
ii  bc                      1.06.95-2        The GNU bc arbitrary precision cal
ii  cups-client             1.4.5-3          Common UNIX Printing System(tm) - 
ii  cups-common             1.4.5-3          Common UNIX Printing System(tm) - 
ii  cups-ppdc               1.4.5-3          Common UNIX Printing System(tm) - 
ii  debconf [debconf-2.0]   1.5.38           Debian configuration management sy
ii  ghostscript             8.71~dfsg2-10    The GPL Ghostscript PostScript/PDF
ii  libavahi-client3        0.6.28-3         Avahi client library
ii  libavahi-common3        0.6.28-3         Avahi common library
ii  libc6                   2.11.2-11        Embedded GNU C Library: Shared lib
ii  libcups2                1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupscgi1             1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsdriver1          1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsimage2           1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsmime1            1.4.5-3          Common UNIX Printing System(tm) - 
ii  libcupsppdc1            1.4.5-3          Common UNIX Printing System(tm) - 
ii  libdbus-1-3             1.4.1-2          simple interprocess messaging syst
ii  libgcc1                 1:4.4.5-10       GCC support library
ii  libgnutls26             2.10.4-2         the GNU TLS library - runtime libr
ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime libraries - k
ii  libijs-0.35             0.35-7           IJS raster image transport protoco
ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime libraries
ii  liblcms1                1.18.dfsg-1.2+b3 Color management library
ii  libldap-2.4-2           2.4.23-7         OpenLDAP libraries
ii  libpam0g                1.1.1-6.1        Pluggable Authentication Modules l
ii  libpaper1               1.1.24           library for handling paper charact
ii  libpoppler5             0.12.4-1.2       PDF rendering library
ii  libslp1                 1.2.1-7.8        OpenSLP libraries
ii  libstdc++6              4.4.5-10         The GNU Standard C++ Library v3
ii  libusb-0.1-4            2:0.1.12-17      userspace USB programming library
ii  lsb-base                3.2-27           Linux Standard Base 3.2 init scrip
ii  poppler-utils           0.12.4-1.2       PDF utilitites (based on libpopple
ii  procps                  1:3.2.8-10       /proc file system utilities
ii  ssl-cert                1.0.28           simple debconf wrapper for OpenSSL
ii  ttf-freefont            20100919-1       Freefont Serif, Sans and Mono True
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages cups recommends:
ii  avahi-daemon               0.6.28-3      Avahi mDNS/DNS-SD daemon
ii  cups-driver-gutenprint     5.2.6-1       printer drivers for CUPS
ii  foomatic-filters           4.0.6-1       OpenPrinting printer support - fil
ii  ghostscript-cups           8.71~dfsg2-10 The GPL Ghostscript PostScript/PDF

Versions of packages cups suggests:
ii  cups-bsd                  1.4.5-3        Common UNIX Printing System(tm) - 
pn  cups-pdf                  <none>         (no description available)
ii  foomatic-db               20110209-1     OpenPrinting printer support - dat
pn  hplip                     <none>         (no description available)
ii  smbclient                 2:3.5.6~dfsg-5 command-line SMB/CIFS clients for 
ii  udev                      165-1          /dev/ and hotplug management daemo

-- debconf information:
  cupsys/raw-print: true
  cupsys/backend: ipp, lpd, parallel, scsi, serial, socket, usb, snmp, dnssd



--- End Message ---
--- Begin Message ---
On Sun 13 Feb 2011 at 18:53:46 +1100, Paul wrote:

> I propose the following change.
> 
> >From this:
>     drwxr-xr-x 4 root lp 4096 Feb 13 08:35 /etc/cups/
> To this:
>     drwxr-xr-x 4 root lpadmin 4096 Feb 13 08:35 /etc/cups/
> 
> 
> Following is my rationale:
> 
> /usr/share/doc/base-passwd/users-and-groups.html specifies that the
> 'lpadmin' group as being able to administer printers.  On the other
> hand, the 'lp' group has direct access to parallel ports, printer
> spools, etc.
> 
> Since /etc/cups contains configuration files it is better suited to
> group ownership by the 'lpadmin' group.
> 
> Currently the CUPS web-based administration area is administered by
> anyone in the lpadmin group.  Making this change means to those same
> people can effect similar changes using a text editor - without having
> to invoke root privileges.

Enhancement requests are always welcome in the BTS. However, after six
years and no response it is probably unrealistic to expect the request
to be fulfilled any time soon. The question becomes - should we carry
this bug in the BTS indefinitely? I think not; hence closing. Sorry.

Regards,

-- 
Brian.

--- End Message ---

Reply to: