[cups.general] Possibly insecure default LogFilePerm value 0644

Johannes Meixner jsmeix at suse.de
Tue Jul 12 07:54:09 PDT 2011


Hello,

On Jul 12 05:48 Helge Blischke wrote:
> Well, instead of compiling a full blown c program using the CUPS API and
> implementing a lot of IPP stuff to get the needed information our of CUPS, I
> just write a little Perl script which uses Perl's grep function to extract
> the "[Job xxxx]" messages from the error_log file. It's just a matter of
> economy.

In your particular case you could set in cupsd.conf "LogFilePerm 0644"
to have a world readable error_log file.

But I was asking whether or not a more secure default LogFilePerm 0640
(i.e. when no LogFilePerm was explicitly specified in cupsd.conf)
would make sense.


Kind Regards
Johannes Meixner
-- 
SUSE LINUX Products GmbH -- Maxfeldstrasse 5 -- 90409 Nuernberg -- Germany
HRB 16746 (AG Nuernberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendoerffer





More information about the cups mailing list