[cups.bugs] [LOW] STR #2491: Job files created without permission for CUPS user to read.

Steven M. Wilson stevew at purdue.edu
Fri Aug 24 14:44:23 PDT 2007


Thanks for your prompt response.  It looks like the pstops filter is the 
one having trouble with permissions (see debug messages below).  Perhaps 
it isn't using IPP?

    E [23/Aug/2007:13:31:32 -0400] PID 9723 
(/usr/local/lib/cups/filter/pstops) stopped with status 1!
    E [23/Aug/2007:13:31:32 -0400] [Job 3] Unable to open file 
"/usr/local/var/spool/cups/d00003-001" - Permission denied

Kind regards,

Steve

Steven M. Wilson, Systems and Network Manager
Markey Center for Structural Biology
Purdue University
(765) 496-1946



Michael Sweet wrote:
> [STR Closed w/o Resolution]
>
> Job control files (cNNNNN) aren't supposed to be readable by the "lp" user
> for security reasons. If you have a filter that wants to access to them,
> it has to do an IPP request to ask for the attribute(s) it are interested
> in - it cannot read the file directly.
>
> Job data files (dNNNNN-MMM) *are* readable by the "lp" user and are
> created mode 0640 in scheduler/client.c.
>
> [Keep in mind that previous Debian releases ran cupsd as "lp", so you'd
> never have noticed this issue before...]
>
> Link: http://www.cups.org/str.php?L2491
> Version: 1.3.0
> Fix Version: None
>
>   





More information about the cups-devel mailing list