[cups.bugs] [LOW] STR #3667: classes.conf and printers.conf have permissions 600 (-rw-------)

[Michael Sweet]

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR Closed w/Resolution]

(Not a security bug)

printers.conf can contain sensitive information in the device URI and so
we do not allow access to this file by ordinary users.  In 1.4.5 we are
using ConfigFilePerm with the group and other bits masked so you'll
basically just be changing the read, write, and execute bits of the owner
(root).

classes.conf does not have this issue and in 1.4.5 we are using the
ConfigFilePerm value as-is.

Link: http://www.cups.org/str.php?L3667
Version: 1.4-current
Fix Version: None