[cups.bugs] [LOW] STR #2491: Job files created without permission for CUPS user to read.
Steven M. Wilson
stevew at purdue.edu
Fri Aug 24 14:44:23 PDT 2007
Thanks for your prompt response. It looks like the pstops filter is the
one having trouble with permissions (see debug messages below). Perhaps
it isn't using IPP?
E [23/Aug/2007:13:31:32 -0400] PID 9723
(/usr/local/lib/cups/filter/pstops) stopped with status 1!
E [23/Aug/2007:13:31:32 -0400] [Job 3] Unable to open file
"/usr/local/var/spool/cups/d00003-001" - Permission denied
Kind regards,
Steve
Steven M. Wilson, Systems and Network Manager
Markey Center for Structural Biology
Purdue University
(765) 496-1946
Michael Sweet wrote:
> [STR Closed w/o Resolution]
>
> Job control files (cNNNNN) aren't supposed to be readable by the "lp" user
> for security reasons. If you have a filter that wants to access to them,
> it has to do an IPP request to ask for the attribute(s) it are interested
> in - it cannot read the file directly.
>
> Job data files (dNNNNN-MMM) *are* readable by the "lp" user and are
> created mode 0640 in scheduler/client.c.
>
> [Keep in mind that previous Debian releases ran cupsd as "lp", so you'd
> never have noticed this issue before...]
>
> Link: http://www.cups.org/str.php?L2491
> Version: 1.3.0
> Fix Version: None
>
>
More information about the cups-devel
mailing list