Bug#862732: cups-filters: unreadable file /usr/lib/cups/backend/serial

2017-05-16 Thread Didier 'OdyX' Raboud
Control: tags -1 +pending -moreinfo

Le mardi, 16 mai 2017, 15.04:26 h CEST Till Kamppeter a écrit :
> The "serial" backend is a CUPS backend which has to run as root to 
> correctly work. CUPS decides which backends run as roo by the file 
> permissions of the backends. One of the backends which comes with CUPS 
> and has to run as root is the "usb" backend:
> 
> -r-xr--r-- 2 root root 34808 Mar 23 14:55 /usr/lib/cups/backend/usb
> 
> This backend is still world-readable and only omits the execution bit 
> for anyone else than root itself (644 permissions). This should also 
> work with the "serial" backend in cups-filters.

Ack, thanks for the explanation. I've fixed this in the upcoming 1.14.0 
experimental upload.

Cheers,
OdyX

signature.asc
Description: This is a digitally signed message part.


Bug#862732: cups-filters: unreadable file /usr/lib/cups/backend/serial

2017-05-16 Thread Till Kamppeter

On 05/16/2017 02:48 PM, Didier 'OdyX' Raboud wrote:

… but I think it would work with a chmod 744.
Alexander: do you have a serial printer; and could you test?
Till: as you're the initial committer of that code; any opinion ?



The "serial" backend is a CUPS backend which has to run as root to 
correctly work. CUPS decides which backends run as roo by the file 
permissions of the backends. One of the backends which comes with CUPS 
and has to run as root is the "usb" backend:


-r-xr--r-- 2 root root 34808 Mar 23 14:55 /usr/lib/cups/backend/usb

This backend is still world-readable and only omits the execution bit 
for anyone else than root itself (644 permissions). This should also 
work with the "serial" backend in cups-filters.


   Till



Bug#862732: cups-filters: unreadable file /usr/lib/cups/backend/serial

2017-05-16 Thread Didier 'OdyX' Raboud
Control: tags -1 +moreinfo

Le mardi, 16 mai 2017, 12.13:23 h CEST Alexander Kurtz a écrit :
> Your package ships a file in /usr which is unreadable for regular
> users.

That's the justification from the source:

# Make the serial backend run as root, since /dev/ttyS* are
# root:dialout and thus not accessible as user lp
chmod 700 debian/cups-filters/usr/lib/cups/backend/serial

… but I think it would work with a chmod 744.
Alexander: do you have a serial printer; and could you test?
Till: as you're the initial committer of that code; any opinion ?

Cheers,
OdyX



Bug#862732: cups-filters: unreadable file /usr/lib/cups/backend/serial

2017-05-16 Thread Alexander Kurtz
Package: cups-filters
Version: 1.11.6-3
Severity: minor

Hi!

Your package ships a file in /usr which is unreadable for regular
users, see the subject line for more details!

Best regards

Alexander Kurtz

signature.asc
Description: This is a digitally signed message part