cups + foomatic-rip + suidperl
Michael Thalmann
lists at s3u.de
Sun Jan 29 13:33:57 PST 2006
I am running cups with foomatic-rip to spool to a network connected postscript printer. If suidperl is activated, I get the following error
>less /tmp/foomatic-rip.log
foomatic-rip version $Revision: 3.48 $ running...
called with arguments: '281', 'root', 'printtest', '1', ''
Parsing PPD file ...
*cupsFilter: "application/vnd.cups-postscript 0 foomatic-rip"
Added option ColorSpace
Added option PageSize
Added option PageRegion
Added option ImageableArea
Added option PaperDimension
Added option InputSlot
Added option Duplex
Added option Resolution
Added option PreFilter
Added option Font
Parameter Summary
-----------------
Spooler: cups
Printer: Optras
PPD file: /etc/cups/ppd/Optras.ppd
Printer model: Lexmark Optra S 1250 Foomatic/Postscript (recommended)
Options:
Job title: printtest
File(s) to be printed:
<STDIN>
....
-----------
New page: 1 1
Inserting option code into "PageSetup" section.
No page header or page header not DSC-conforming
Flushing FIFO.
Starting renderer
Closing renderer
JCL: <job data>
renderer PID kid4=14198
renderer command: level=0; /usr/bin/printf "%%!\n%%%% %%%%\n<</ManualFeed false>>setpagedevice\n<<
/Duplex false>>setpagedevice\n"; if [ $level -gt 0 ]; then if [ $level -lt 99 ]; then level=" -dLa
nguageLevel=$level"; else level=""; fi; gs -q -dPARANOIDSAFER -dNOPAUSE -dBATCH -sDEVICE=pswrite$l
evel -sOutputFile=- -; else cat; fi
Insecure dependency in system while running setuid at /usr/lib/cups/filter/foomatic-rip line 3450.
tail process done writing data to STDOUT
KID4 finished
KID4 exited with status 0
My Permissions:
ls -l /usr/bin/foomatic-*
-rwxr-xr-x 1 root root 2726 Sep 13 03:06 /usr/bin/foomatic-gswrapper
-rwxr-xr-x 1 root root 197345 Jan 29 21:58 /usr/bin/foomatic-rip
More information about the cups
mailing list