[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1006183: marked as done (cups-browsed: Provide apparmor rule for cups-browsed-debian-edu.conf as shipped on Debian Edu systems)

Your message dated Sat, 19 Mar 2022 20:38:35 +0000
with message-id <E1nVfqN-0002Pj-OA@fasolo.debian.org>
and subject line Bug#1006183: fixed in cups-filters 1.28.7-1+deb11u1
has caused the Debian Bug report #1006183,
regarding cups-browsed: Provide apparmor rule for cups-browsed-debian-edu.conf as shipped on Debian Edu systems
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1006183: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006183
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: cups-browsed
Severity: wishlist
Version: 1.28.11-2
Control: found -1 2.3.3op2-3+deb11u1
X-Debbugs-Cc: debian-edu@lists.debian.org
User: debian-edu@lists.debian.org
Usertags: debian-edu
Tags: patch

Dear CUPS maintainers,
on Debian Edu we face a problem with /etc/apparmor.d/usr.sbin.cups-browsed as shipped in cups-browsed bin:pkg (see [1] for details). The problem is specific to Debian Edu, but it would be really cool to get the most appropriate fix for this into bin:pkg cups-browsed itself.
The problem: in Debian Edu, we move /etc/cups/cups-browsed.conf out of the way and replace it by a symlink that points to /etc/cups/cups-browsed-debian-edu.conf. In Debian Edu, we do this for several files in /etc/ when provisioning an adjusted Debian Edu server or workstation. Unfortunately, since Debian Edu 11, the file /etc/cups/cups-browsed-debian-edu.conf does not get read anymore due to apparmor denying this file from being read.
The request that we ask form the printing team is this: Can you please allow cups-browsed to read from /etc/cups/cups-browsed-debian-edu.conf? A patch for this is attached to this bug report.
Of course, the conffile manipulation approach in Debian Edu is debatable, but shall not be our concern in this bug. (See #311188 if you want to chime in on that topic). 

Thanks+Greets,
Mike


[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1005813
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net


diff -Nru cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed
--- cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed	2022-01-22 12:19:51.000000000 +0100
+++ cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed	2022-02-20 19:51:07.000000000 +0100
@@ -17,6 +17,9 @@
   /var/log/cups/* rw,
   /tmp/** rw,
 
+  # Courtesy to the Debian Edu team...
+  /etc/cups/cups-browsed-debian-edu.conf r,
+
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.cups-browsed>
 }
diff -Nru cups-filters-1.28.11/debian/changelog cups-filters-1.28.11/debian/changelog
--- cups-filters-1.28.11/debian/changelog	2022-01-22 12:19:51.000000000 +0100
+++ cups-filters-1.28.11/debian/changelog	2022-02-20 19:51:15.000000000 +0100
@@ -1,3 +1,12 @@
+cups-filters (1.28.11-2.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * debian/apparmor/usr.sbin.cups-browsed: Allow reading from Debian Edu's
+    cups-browsed config file (/etc/cups/cups-browsed-debian-edu.conf).
+    (Closes: -1).
+
+ -- Mike Gabriel <sunweaver@debian.org>  Sun, 20 Feb 2022 19:51:15 +0100
+
 cups-filters (1.28.11-2) unstable; urgency=medium
 
   * debian/control: lynx has to be handled different in Debian and Ubuntu

Attachment: pgp_TQqpmK7od.pgp
Description: Digitale PGP-Signatur


--- End Message ---
--- Begin Message --- 
Source: cups-filters
Source-Version: 1.28.7-1+deb11u1
Done: Thorsten Alteholz <debian@alteholz.de>

We believe that the bug you reported is fixed in the latest version of
cups-filters, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1006183@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thorsten Alteholz <debian@alteholz.de> (supplier of updated cups-filters package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 14 Mar 2022 22:03:02 +0100
Source: cups-filters
Architecture: source
Version: 1.28.7-1+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1006183
Changes:
 cups-filters (1.28.7-1+deb11u1) bullseye; urgency=medium
 .
   * debian/apparmor/usr.sbin.cups-browsed: Allow reading from Debian Edu's
     cups-browsed config file (/etc/cups/cups-browsed-debian-edu.conf).
     (Closes: #1006183). (patch provided by Mike Gabriel)
   * debian/control: add myself to Uploaders:
Checksums-Sha1:
 77c8a5c4d66d2c01ad3bddd763c8554085fb8deb 3042 cups-filters_1.28.7-1+deb11u1.dsc
 b2088398d7b6b4c855389cbe21e4900d755e4b76 82936 cups-filters_1.28.7-1+deb11u1.debian.tar.xz
 dda952acc12bbb9267c66b64b05afb683bcecae9 13787 cups-filters_1.28.7-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
 3b41452f96e2d67994fb2530f6b365f5047f30a9f0041fbaa89a8435c5757714 3042 cups-filters_1.28.7-1+deb11u1.dsc
 e102cf2196391a26b41794d43526fb3dccc62ab571b1a5691670a4bcba1e6656 82936 cups-filters_1.28.7-1+deb11u1.debian.tar.xz
 bf64d159ef9f84740046be0d15c9a34328fe229279a1af2ad129ec163de620ed 13787 cups-filters_1.28.7-1+deb11u1_amd64.buildinfo
Files:
 5bd291392d8e90e526f7b11235adb069 3042 net optional cups-filters_1.28.7-1+deb11u1.dsc
 d88777f656e8389aeae7bb3545bdda96 82936 net optional cups-filters_1.28.7-1+deb11u1.debian.tar.xz
 43280d8a57bf118d7b6d6bc066404d39 13787 net optional cups-filters_1.28.7-1+deb11u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=39bG
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: