cupsys 1.1.99.rc2-0ubuntu1 source package in Ubuntu

Changelog

cupsys (1.1.99.rc2-0ubuntu1) dapper; urgency=low

  * Many changes have been applied in Debian now; reapply remaining Ubuntu
    changes from scratch to clean up some cruft (see below for details). Also,
    maintain Ubuntu package as SVN branch of the Debian one.
  * debian/rules: Enable --with-cups-user=cupsys and
    --enable-privilege-dropping to not run cupsd as root.
  * debian/control: Remove libdbus-1-dev build dependency, dbus support is not
    something for dapper.
  * debian/cupsys.init.d: Disable reload (it doesn't work as normal user),
    change force-reload to restart.
  * debian/cupsys.init.d: Pre-create access_log and error_log since cupsd
    can't create them as normal user.
  * debian/rules: Set rc runlevel priority to 19.
  * debian/cupsys.{postinst,postrm}, debian/cupsys-client.postinst:
    Setup/remove cupsys user and its needed groups.
  * debian/cupsys.templates: Disable browsing by default due to our 'no open
    ports in the default install' policy.
  * debian/README.Debian: Explain disabling of administrative functions in web
    interface and describe how to re-enable it.
  * debian/cupsys.preinst:
    - Migrate /etc/cups/cupsd-browsing.conf to /etc/cups/cups.d/browse.conf
      for smooth upgrades from Hoary.
    - Fix owner of /etc/cups/ppd/* on upgrades.
  * debian/patches/ubuntu-nowebadmin.dpatch: Explain disabling of
    administrative functions in the web interface and point to doc how to
    reenable it.
  * debian/patches/55_ppd_okidata_name.dpatch: Change "Oki" manufacturer name
    to "Okidata" to be consistent with other PPD files.
  * Implement http://wiki.debian.org/PpdFileStructureSpecification:
    - debian/dirs: Create /usr/share/ppd/cups-included/.
    - debian/rules: Install shipped PPDs into
      /usr/share/ppd/cups-included/<Manufacturer>/ and provide a symlink to
      the old /usr/share/cups/model directory for backwards compatibility.
  * debian/libcupsys2.shlibs: Remove Debian revision to allow -0ubuntuN
    number.
  * Support custom PPD installation by lpadmin members (through e. g.
    gnome-cups-manager):
    - debian/cupsys.dirs: Create /usr/share/ppd/custom/.
    - debian/cupsys.init.d: Fix permissions of that dir to root:lpadmin 3775.
    - debian/rules: Install compatibility symlink
      /usr/share/cups/model/custom.
  * debian/cupsys.dirs: Ship /usr/lib/cups/driver/ to avoid error messages if
    it's missing.
  * debian/patches/09_runasuser.dpatch, scheduler/cert.c: Change root
    certificate permissions from 0440 to 0240, so that the CGI programs cannot
    read it any more. Without this patch, cupsd presented its own certificate
    to itself, and *every* user could do admin tasks without authentication.

cupsys (1.1.99.rc2-0exp1) experimental; urgency=low

  [ Kenshi Muto ]
  * New upstream release 1.2RC2.
    - Because -fpie config becomes optional, compiler works on amd64 and
      other architectures. (closes: #335199)
  * Enable LDAP support.
  * Remove duplicated update-rc.d (closes: #356911)
  * Stopped asking admin password because it works only if user chooses
    digest authentication. The default configuration of Debian uses
    PAM and basic authentication.
  * Enable dbus support.
  * 03_clean.dpatch: Remove produced and remained files during build.
  * Now CUPS uses 'lp' user/group privilege to call backend or any other
    programs.
    CUPS SystemGroup is 'lpadmin'. You need to add users who are allowed
    to add/modify/remove printers/jobs/classes.
  * Remove image.h.patch from source. It is no longer needed.
  * 02_configure.dpath: Remove -rpath from configure.
  * Fix typo in cupsys-bsd description. (closes: #362070)
  * Add Galician debconf translation. (closes: #361258)
  * Update Danish debconf translation. (closes: #357969)
  * Use 'reload' during logrotate instead of 'restart'. It looks safe
    on CUPS 1.2. (though job-restart problem still remains)
  * set TZ in init script only if TZ isn't defined yet.
  * Use if-fi structure style for postrotate of logrotate script.
    It solves error when cupsys is not running. (closes: #347641)
  * Unset TMPDIR environment variable before running daemon. (closes: #347829)
  * Removed /etc/cups/pdftops.conf because it was for pdftops of upstream
    version. Debian CUPS uses xpdf-utils wrapper and doesn't need
    pdftops.conf.
  * Notice: /etc/cups/client.conf has been removed upstream.
  * Notice: {dis,en}able have been renamed to cups{dis,en}able.

  [ Martin Pitt ]
  * debian/patches/48_stdlib.dpatch: Adapted to new upstream version.
  * debian/cupsys.init.d:
    - Fix arguments of start-stop-daemon and remove the hideous kill
      algorithm.
    - Ensure that /var/run/cupsd exists; this makes the init script work with
      /var/run mounted on a tmpfs.
  * debian/libcupsys2-dev.files, debian/libcupsimage2-dev.files: Remove static
    library; upstream does not build them any more, and they are useless
    anyway.
  * Add debian/patches/06_disable_backend_setuid.dpatch: Remove the uid
    changing in scheduler/cups-deviced.c which was introduced recently in
    upstream. It totally breaks device node access (e. g. /dev/lp0 is root:lp
    0660, which is inaccessible for a process which runs as lp:root).
  * debian/rules: Remove --with-cups-user, upstream does not support
    it any more.
  * debian/patches/09_runasuser_fixes.dpatch: RunAsUser was removed upstream;
    rename the patch to 09_runasuser.dpatch and rewrite it:
    - Enclose all changes in an #if CUPS_DROP_PRIVILEGES, so that it is easy to
      enable this feature.
    - scheduler/main.c: Drop privileges after initialization.
    - scheduler/conf.c: If we build with CUPS_DROP_PRIVILEGES, set RunUser to
      User instead of getuid(), since at that point we will always run as root
      (privileges cannot yet be dropped at that point).
    - config-scripts/cups-defaults.m4: Add --enable-privilege-dropping option.
    - config.h.in: Add CUPS_DROP_PRIVILEGES option template.
  * Add debian/patches/09_runasuser_autoconf.dpatch: autoconf changes for
    09_runasuser_fixes.dpatch changes.
  * debian/pdftops: Fix reading from stdin (https://launchpad.net/bugs/17124)
  * debian/cupsys.preinst: Remove dangling /etc/cups/pdftops.conf symlink on
    upgrades to unbreak printing with poppler-utils.
  * debian/control: Add poppler-utils alternative for xpdf-utils dependency.
  * Add debian/patches/12_quiesce_ipp_logging.dpatch:
    - Drop successful IPP messages to log level 'debug' and unsuccessful ones
      to 'info'.
    - Do not flood access_log with successful CUPS-Get-Printers and
      Get-Printer-Attributes queries (which are generated by e. g.
      gnome-cups-icon every 3 seconds).
    - Closes: #280718
  * Add debian/patches/13_default_log_warn.dpatch: Raise default log severity
    to 'warning' to not log gazillions of IPP requests by default. (other part
    of #280718)
  * debian/rules, debian/cupsys.postinst: Remove obsolete /etc/cups/certs and
    /var/lib/cups/certs (certificates are managed in /var/run/certs now).
  * debian/cupsys.preinst: Remove obsolete /etc/cups/certs symlink on upgrades.
  * debian/cupsys-client.files: Install cupstestdsc and manpage.
  * debian/cupsd.init: Have force-reload to reload, not restart.
  * debian/cupsys.logrotate: Use force-reload instead of reload, since the
    latter is not required to exist by Debian Policy.
  * debian/rules: Ship browsing_status and enable_browsing.
  * debian/patches/20_httpGetHostname_crash.dpatch: Add some robustifications
    to httpGetHostname() to hopefully fix a reported crash.

 -- Martin Pitt <email address hidden>   Fri, 21 Apr 2006 16:19:37 +0200