Bug#876207: /etc/cups/cups-files.conf: root not in JobPrivateAccess - cannot access jobs private attributes
Package: cups-daemon
Version: 2.2.4-7
Severity: important
File: /etc/cups/cups-files.conf
Dear Maintainer,
Since cups 1.5 job-originating-user-name is a JobPrivateValues.
JobPrivateAccess gives access to @OWNER and @SYSTEM by default.
Since Debian cups /etc/cups/cups-files.conf set @SYSTEM to lpadmin only
root is not allowed.
And cups-pk-helper which gnome-control-center printers panel jobs-dialog
makes use of to edit job (stop/resume and purge) fails. Its job status
routine always ask as root for the job-originating-user-name attribute
and fails with invalid a status.
The cups-files.conf man page suggests default for SystemGroup to be:
"admin", "lpadmin", "root", "sys", and/or "system".
which would fix the issue.
A local workaround is to add root to lpadmin group.
Setting as important as it breaks unrelated packages.
Changelog tell "root" group should be added back when:
"As soon as bug #50620 gets fixed, I'll set up to add root to the
group," ... well this bug is nowadays fixed or at least closed.
Best regards
Alban
-- System Information:
Debian Release: buster/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages cups-daemon depends on:
ii adduser 3.116
ii bc 1.06.95-9+b3
ii dpkg 1.18.24
ii init-system-helpers 1.49
ii libavahi-client3 0.7-3
ii libavahi-common3 0.7-3
ii libc6 2.24-17
ii libcups2 2.2.4-7
ii libcupsmime1 2.2.4-7
ii libdbus-1-3 1.11.16+really1.10.22-1
ii libgssapi-krb5-2 1.15.1-2
ii libpam0g 1.1.8-3.6
ii libpaper1 1.1.24+nmu5
ii libsystemd0 234-3
ii lsb-base 9.20170808
ii procps 2:3.3.12-3
ii ssl-cert 1.0.39
Versions of packages cups-daemon recommends:
ii avahi-daemon 0.7-3
ii colord 1.3.3-2
ii cups-browsed 1.16.4-1+b1
Versions of packages cups-daemon suggests:
ii cups 2.2.4-7
ii cups-bsd 2.2.4-7
ii cups-client 2.2.4-7
ii cups-common 2.2.4-7
ii cups-filters [foomatic-filters] 1.16.4-1+b1
ii cups-ppdc 2.2.4-7
ii cups-server-common 2.2.4-7
ii foomatic-db-compressed-ppds [foomatic-db] 20170723-1
ii ghostscript 9.21~dfsg-1
ii hplip 3.17.7+repack0-3
ii poppler-utils 0.57.0-2
ii printer-driver-cups-pdf [cups-pdf] 3.0.1-4
ii printer-driver-gutenprint 5.2.13-1
ii printer-driver-hpcups 3.17.7+repack0-3
ii smbclient 2:4.6.7+dfsg-1
ii udev 234-3
-- no debconf information
Reply to: