It's fine to have root as member of the lpadmin group. BUT… it's not
fine to have cups-pk-helper run as root and allow unauthorized users (in
CUPS' eyes) cancel other user's jobs.

This should be fixed in cups-pk-helper through making it interact with
CUPS using the requesting user's user. This would ensure that CUPS's
authorizations are respected.

I don't want to see a situation where "any GNOME user" accesses "cups-
pk-helper which runs as root" and can then "manipulate CUPS as if it
were a member of lpadmin".

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/934291

Title:
  Deleting or stopping print jobs does not work

To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-control-center/+bug/934291/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to