On Tue, Jan 03, 2012 at 06:13:39PM -0600, Jamie Strandboge wrote:
> Author: Jamie Strandboge <[email protected]>
> Description: allow read of @{HOME}/.cups/client.conf
> Bug-Ubuntu: https://launchpad.net/bugs/887992
> 
> Index: apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client
> ===================================================================
> --- apparmor-2.7.0.orig/profiles/apparmor.d/abstractions/cups-client  
> 2011-07-14 07:57:57.000000000 -0500
> +++ apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client       
> 2012-01-03 13:49:43.000000000 -0600
> @@ -1,7 +1,7 @@
>  # vim:syntax=apparmor
>  # ------------------------------------------------------------------
>  #
> -#    Copyright (C) 2009 Canonical Ltd.
> +#    Copyright (C) 2009-2012 Canonical Ltd.
>  #
>  #    This program is free software; you can redistribute it and/or
>  #    modify it under the terms of version 2 of the GNU General Public
> @@ -13,3 +13,5 @@
>    /etc/cups/client.conf   r,
>    # client should be able to talk the local cupsd
>    /{,var/}run/cups/cups.sock w,
> +  # client should be able to read user-specified cups configuration
> +  @{HOME}/.cups/client.conf r,

A couple of questions:

Should this have the owner attribute?

Also, while trying to track down what information is stored in the
client.conf file, I discovered that I have a ~/.cups/lpoptions file
which contains my default printer. I suspect both /etc/cups/lpoptions
and @{HOME}/.cups/lpoptions should be added to the abstraction as well.

Thanks.

-- 
Steve Beattie
<[email protected]>
http://NxNW.org/~steve/

Attachment: signature.asc
Description: Digital signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to