CUPS 1.2.x and privileges

Helge Blischke h.blischke at srz.de
Tue May 16 05:21:28 PDT 2006


Volker Behr wrote:
> Hi,
> 
> in CUPS 1.2.x the scheduler option "RunAsUser" has been removed for security reasons. Since I am employing a special backend (CUPS-PDF) which needs to assume different UIDs during execution it relays on being started with root UID.
> Is there any alternative way CUPS provides now with version 1.2.x which allows to grant backends full root privileges for their execution?
> 
> Since the backend is supposed to run on different OS platforms a setting of permissions via SELinux or similar won't work and flagging a backend suid-root does not seem a really good idea to me.
> 
> I am looking forward to your comments,
> 
> Volker

IIRC, in 1.2 setting the file permissions of the backend executable to 0700 forces the backend 
to run as root (lp otherwise, I think).

But, to be sure, look into the documentation and/or the sources.

Helge


-- 
Helge Blischke
Softwareentwicklung
SRZ Berlin | Firmengruppe besscom
http://www.srz.de




More information about the cups mailing list