cups + foomatic-rip + suidperl

Michael Thalmann lists at s3u.de
Sun Jan 29 13:33:57 PST 2006


I am running cups with foomatic-rip to spool to a network connected postscript printer. If suidperl is activated, I get the following error
>less /tmp/foomatic-rip.log

foomatic-rip version $Revision: 3.48 $ running...
called with arguments: '281', 'root', 'printtest', '1', ''
Parsing PPD file ...
*cupsFilter: "application/vnd.cups-postscript 0 foomatic-rip"
Added option ColorSpace
Added option PageSize
Added option PageRegion
Added option ImageableArea
Added option PaperDimension
Added option InputSlot
Added option Duplex
Added option Resolution
Added option PreFilter
Added option Font

Parameter Summary
-----------------
Spooler: cups
Printer: Optras
PPD file: /etc/cups/ppd/Optras.ppd
Printer model: Lexmark Optra S 1250 Foomatic/Postscript (recommended)
Options:
Job title: printtest
File(s) to be printed:
<STDIN>
....
-----------
New page:  1 1
Inserting option code into "PageSetup" section.
No page header or page header not DSC-conforming
Flushing FIFO.

Starting renderer

Closing renderer
JCL: <job data>

renderer PID kid4=14198
renderer command: level=0; /usr/bin/printf "%%!\n%%%% %%%%\n<</ManualFeed false>>setpagedevice\n<<
/Duplex false>>setpagedevice\n"; if [ $level -gt 0 ]; then if [ $level -lt 99 ]; then level=" -dLa
nguageLevel=$level"; else level=""; fi; gs -q -dPARANOIDSAFER -dNOPAUSE -dBATCH -sDEVICE=pswrite$l
evel -sOutputFile=- -; else cat; fi
Insecure dependency in system while running setuid at /usr/lib/cups/filter/foomatic-rip line 3450.
tail process done writing data to STDOUT
KID4 finished
KID4 exited with status 0

My Permissions:
ls -l /usr/bin/foomatic-*
-rwxr-xr-x  1 root root   2726 Sep 13 03:06 /usr/bin/foomatic-gswrapper
-rwxr-xr-x  1 root root 197345 Jan 29 21:58 /usr/bin/foomatic-rip





More information about the cups mailing list