search

OpenPrinting / cups-snap

Complete CUPS printing stack in a snap
25 stars 14 forks source link

Make sure all backends which need root have correct permissions #7

Closed tillkamppeter closed 3 years ago

tillkamppeter commented 3 years ago

Some CUPS backends (like "usb") need to run as root, they need to have execute permissions for non-root removed.

tillkamppeter commented 3 years ago

The only backend with wrong permissons was the "usb" backend as CUPS upstream assumes that root is not needed here because UDEV sets "lp" group ownership to the raw USB devices. This does not work in our CUPS Snap. Therefore the "usb" backend has to run as root. CUPS controls this by the executable permissions, if only the owner (which is root) can run it, it runs as root.

This I have preliminary implemented in commit 0dbc1fb.

The best solution is to do it in CUPS upstream, but I have to find out how to best do it there. Therefore I will not close this issue for now.

tillkamppeter commented 3 years ago

Solved in CUPS upstream, OpenPrinting/cups#121, workaround in the CUPS Snap removed.