Bug#658332: cups-pdf: Author is included in output
On Wed, 01 Feb 2012 16:22:46 -1000 (HST) Ryo Furue <furue@hawaii.edu> wrote:
> Package: cups-pdf
> Version: 2.6.1-5
> Severity: serious
>
> Dear Maintainer,
>
> The PDF files produced from cups-pdf always contains Author,
> which is bad for security if the user wants to generate
> sensitive PDF files.
>
> The Author field is in the format of "(username)".
> I confirmed this from LibreOffice writer, and Opera (browser),
> and Chrome (browser). When I tested LibreOffice, I specifically
> switched off the inclusion of the user info in the document.
>
> The PDF file produced by cups-pdf contains the "(username)" string
> in two places. One is as a regular PDF metadata, which you can
> remove using a tool like pdftk. But, I don't know how to delete
> the other one, which takes the form of
>
> <rdf:Description rdf:about='864de34d-855f-11ec-0000-eb4edbf2574'
> xmlns:dc='http://purl.org/dc/elements/1.1/'
> dc:format='application/pdf'><dc:title><rdf:Alt><rdf:li
> xml:lang='x-default'>(Print -
> Google)</rdf:li></rdf:Alt></dc:title><dc:creator><rdf:Seq><rdf:li>(furue)</rdf:li></rdf:Seq></dc:creator></rdf:Description>
>
> In the above, "(furue)" is the string in question.
Revisiting the above issue, I notice that files printed by e.g.
Firefox to CUPS-PDF indeed include the creator and Author strings. I
don't see anything in CUPS-PDF source that would produce these. I'm
thus begining to wonder whether CUPS itself includes these fields by
standard? If yes, shall we reassign this bug to CUPS?
Martin-Éric
Reply to: