[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cups-bugs
Subject:    Re: [cups.bugs] [LOW] STR #3667: classes.conf and printers.conf
From:       Michael Sweet <msweet () apple ! com>
Date:       2010-09-09 18:21:57
Message-ID: 20100909182158.1E3773C680EA () dns ! easysw ! com
[Download RAW message or body]


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR Closed w/Resolution]

(Not a security bug)

printers.conf can contain sensitive information in the device URI and so
we do not allow access to this file by ordinary users.  In 1.4.5 we are
using ConfigFilePerm with the group and other bits masked so you'll
basically just be changing the read, write, and execute bits of the owner
(root).

classes.conf does not have this issue and in 1.4.5 we are using the
ConfigFilePerm value as-is.

Link: http://www.cups.org/str.php?L3667
Version: 1.4-current
Fix Version: None

_______________________________________________
cups-bugs mailing list
cups-bugs@easysw.com
http://lists.easysw.com/mailman/listinfo/cups-bugs
[prev in list] [next in list] [prev in thread] [next in thread]