Comment 26 for bug 934291

Mario, thank you for the detailed analysis. This is really helpful.

I wonder though if the right fix would be to have cups-pk-helper run as lpadmin, rather than root? I'm not familiar with the details though, so I don't know if that would work or is possible. If the goal in having lpadmin is to reduce things that must be root, then perhaps this is the right answer though?

This probably does need sending up to Debian and getting their opinion. In particular I don't want to inadvertently compromise security by just making something run as root.

Till, do you have any opinion?