Hello community,

here is the log from the commit of package cups-filters for openSUSE:Factory 
checked in at 2020-11-13 18:53:36
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cups-filters (Old)
 and      /work/SRC/openSUSE:Factory/.cups-filters.new.24930 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "cups-filters"

Fri Nov 13 18:53:36 2020 rev:47 rq:847408 version:1.27.2

Changes:
--------
--- /work/SRC/openSUSE:Factory/cups-filters/cups-filters.changes        
2020-03-08 22:23:55.076069336 +0100
+++ /work/SRC/openSUSE:Factory/.cups-filters.new.24930/cups-filters.changes     
2020-11-13 18:53:59.461770362 +0100
@@ -1,0 +2,15 @@
+Tue Nov 10 08:06:10 CET 2020 - jsm...@suse.de
+
+- The wrapper backends /usr/lib/cups/backend/beh
+  and /usr/lib/cups/backend/implicitclass must be installed
+  with 0700 permissions so that cupsd runs them as root
+  (backends with root-only permissions are run as root by cupsd)
+  because otherwise wrapper backends cannot run other backends
+  that need to run as root in particular the ipp backend runs
+  as root and the implicitclass wrapper backend runs it
+  to print via queues that are generated by cupsd-browsed,
+  see the upstream issue
+  https://github.com/OpenPrinting/cups-filters/issues/183
+  (boo#1178604).
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ cups-filters.spec ++++++
--- /var/tmp/diff_new_pack.1FLUG8/_old  2020-11-13 18:54:01.809772919 +0100
+++ /var/tmp/diff_new_pack.1FLUG8/_new  2020-11-13 18:54:01.813772923 +0100
@@ -324,8 +324,17 @@
 %dir /usr/lib/cups/driver
 /usr/lib/cups/driver/driverless
 %dir /usr/lib/cups/backend
-%attr(0755,root,root) /usr/lib/cups/backend/beh
-%attr(0755,root,root) /usr/lib/cups/backend/implicitclass
+# The wrapper backends beh and implicitclass must be installed with 0700 
permissions
+# so that cupsd runs them as root (backends with root-only permissions are run 
as root by cupsd)
+# because otherwise wrapper backends cannot run other backends that need to 
run as root
+# in particular the ipp backend runs as root and the implicitclass wrapper 
backend runs it
+# to print via queues that are generated by cupsd-browsed,
+# see 
https://github.com/OpenPrinting/cups-filters/issues/183#issuecomment-570196216
+# and https://bugzilla.opensuse.org/show_bug.cgi?id=1178604
+%attr(0700,root,root) /usr/lib/cups/backend/beh
+%attr(0700,root,root) /usr/lib/cups/backend/implicitclass
+# The parallel backend does not need to be run as root because cupsd runs 
backends by default as user lp group lp
+# and the parallel port kernel device node /dev/lp0 has by default rw 
permissions for the group lp
 %attr(0755,root,root) /usr/lib/cups/backend/parallel
 %attr(0755,root,root) /usr/lib/cups/backend/cups-brf
 # Serial backend needs to run as root
_______________________________________________
openSUSE Commits mailing list -- commit@lists.opensuse.org
To unsubscribe, email commit-le...@lists.opensuse.org
List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette
List Archives: 
https://lists.opensuse.org/archives/list/commit@lists.opensuse.org

Reply via email to