[cups.bugs] [MOD] STR #2242: Cups should use SO_PEERCRED / getpeereid on AF_UNIX socket connections.

Tefnet developers at tefnet.pl
Thu Feb 15 04:06:40 PST 2007


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

I have a server with 40 remote graphical session users. I would like to
limit their access to various cups components by determining their groups
or names (Require user ...). Cupsd runs on the same machine, so cups
clients connect to it via unix socket (/var/run/cups/cups.sock).
The problem is that cups needlessly asks user to authenticate with
password, when it can use getpeereid
(http://resin.csoft.net/cgi-bin/man.cgi?section=2&topic=getpeereid) on BSD
or getsockopt(s, SO_GETPEERCRED, ...)
(http://www.rt.com/man/socket.4.html) on linux. This way we can avoid
bugging the user when is already authenticated.

Link: http://www.cups.org/str.php?L2242
Version: 1.2.7





More information about the cups mailing list