[cups.bugs] [LOW] STR #2491: Job files created without permission for CUPS user to read.

[Steven M. Wilson]

Michael,

I can't reproduce the error now... it works and that's what counts.  But 
thanks again for your help!

Steve

Steven M. Wilson, Systems and Network Manager
Markey Center for Structural Biology
Purdue University
(765) 496-1946



Steven M. Wilson wrote:
> Thanks for your prompt response.  It looks like the pstops filter is 
> the one having trouble with permissions (see debug messages below).  
> Perhaps it isn't using IPP?
>
>    E [23/Aug/2007:13:31:32 -0400] PID 9723 
> (/usr/local/lib/cups/filter/pstops) stopped with status 1!
>    E [23/Aug/2007:13:31:32 -0400] [Job 3] Unable to open file 
> "/usr/local/var/spool/cups/d00003-001" - Permission denied
>
> Kind regards,
>
> Steve
>
> Steven M. Wilson, Systems and Network Manager
> Markey Center for Structural Biology
> Purdue University
> (765) 496-1946
>
>
>
> Michael Sweet wrote:
>> [STR Closed w/o Resolution]
>>
>> Job control files (cNNNNN) aren't supposed to be readable by the "lp" 
>> user
>> for security reasons. If you have a filter that wants to access to them,
>> it has to do an IPP request to ask for the attribute(s) it are 
>> interested
>> in - it cannot read the file directly.
>>
>> Job data files (dNNNNN-MMM) *are* readable by the "lp" user and are
>> created mode 0640 in scheduler/client.c.
>>
>> [Keep in mind that previous Debian releases ran cupsd as "lp", so you'd
>> never have noticed this issue before...]
>>
>> Link: http://www.cups.org/str.php?L2491
>> Version: 1.3.0
>> Fix Version: None
>>
>>   
>