"Permission Denied" when accessing cgi files

[James Mills]

> I am have cross compiled cups 1.2.12 for an ARM Linux machine running OpenEmbedded.
>
> It compiles fine, and starts up fine.  However, when I try and access any of the backend cgi, I get the following error:
>
> D [13/Nov/2008:14:20:33 +0000] cupsdReadClient: 9 GET /printers/ HTTP/1.1
> D [13/Nov/2008:14:20:33 +0000] cupsdReadClient: 9 Browser asked for language "en-us.utf-8"...
> D [13/Nov/2008:14:20:33 +0000] cupsdAuthorize: No authentication data provided.
> I [13/Nov/2008:14:20:33 +0000] commptr=""
> D [13/Nov/2008:14:20:33 +0000] CGI /usr/lib/cups/cgi-bin/printers.cgi started - PID = 2858
> I [13/Nov/2008:14:20:33 +0000] Started "/usr/lib/cups/cgi-bin/printers.cgi" (pid=2858)
> D [13/Nov/2008:14:20:33 +0000] cupsdSendCommand: 9 file=11
> E [13/Nov/2008:14:20:33 +0000] PID 2858 (/usr/lib/cups/cgi-bin/printers.cgi) stopped with status 22!
> D [13/Nov/2008:14:20:33 +0000] [CGI] /usr/lib/cups/cgi-bin/printers.cgi: Permission denied
>
> I can manually run the cgi files (as root), and get the DEBUG and HTML output I expect.
>
> I have tried various things to do with permissions, including setting 777 permissions on /usr/lib/cups and /usr/share/cups, but nothing is helping.
>
> I truly hope I am making some boneheaded mistake in the config file, and to that end, here it is:
>
> LogLevel debug
>
> SystemGroup root
> Port 631
> Listen /var/run/cups/cups.sock
>
> Browsing On
> BrowseOrder allow,deny
> BrowseAllow @LOCAL
>
> DefaultAuthType Basic
>
> <Location />
>   Order allow,deny
>   Allow From all
> </Location>
>
> <Location /admin>
>
>   Order allow,deny
>   Allow From all
> </Location>
>
> <Location /admin/conf>
>   AuthType Basic
>   Require user @SYSTEM
>   Order allow,deny
>   Allow From all
> </Location>
>
> <Policy default>
>   <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
>     Require user @OWNER @SYSTEM
>     Order deny,allow
>   </Limit>
>
>   <Limit Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default>
>     AuthType Basic
>     Require user @SYSTEM
>     Order deny,allow
>   </Limit>
>
>   <Limit Cancel-Job CUPS-Authenticate-Job>
>     Require user @OWNER @SYSTEM
>     Order deny,allow
>   </Limit>
>
>   <Limit All>
>     Order deny,allow
>   </Limit>
> </Policy>
>
>
> Maybe some missing Auth bits?  I'm at a loss...
>
> Please let me know if any additional information would be helpful.  I really need backend printing for this device, and cups is the best! :)
>
> ~james

Figures.  I finally post after hours of pain, only to realize the problem minutes after posting.  My "/" was set to mode 444.  Setting to "755" cleared things right up.

Thanks!
~james