Thank you for the clarification.

I agree that adding a separate root D-Bus backend is not an ideal solution,
as it adds another privileged service and conflicts with the purpose of the
Ubuntu-specific unprivileged-helper patch.

Please consider the attached root-backend debdiff superseded for now. The
original regression remains reproducible after the CUPS CVE-2025-61915 fix.

I understand that the preferred direction is to investigate dropping the
Ubuntu-specific run_as_cups-pk-helper patch, restoring the main mechanism to
run as root, and adding root to the lpadmin group as needed for Ubuntu's CUPS
policy. I would be happy to test a proposed package or patch.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2167414

Title:
  ServerSetSettings fails after CVE-2025-61915: non-root cups-pk-helper
  cannot PUT cupsd.conf

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups-pk-helper/+bug/2167414/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to