Format: 1.7 Date: Thu, 02 Aug 2007 14:06:05 +0200 Source: cupsys Binary: libcupsys2-dev cupsys libcupsys2 libcupsimage2 cupsys-common cupsys-client cupsys-bsd libcupsimage2-dev Architecture: ia64_translations ia64 Version: 1.2.12-1ubuntu2 Distribution: autobuild Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Martin Pitt Description: cupsys - Common UNIX Printing System(tm) - server cupsys-bsd - Common UNIX Printing System(tm) - BSD commands cupsys-client - Common UNIX Printing System(tm) - client programs (SysV) libcupsimage2 - Common UNIX Printing System(tm) - image libs libcupsimage2-dev - Common UNIX Printing System(tm) - image development files libcupsys2 - Common UNIX Printing System(tm) - libs libcupsys2-dev - Common UNIX Printing System(tm) - development files Launchpad-Bugs-Fixed: 119289 129634 Changes: cupsys (1.2.12-1ubuntu2) gutsy; urgency=low . * Drop our derooting changes. It still has some regressions, and with upstream not even acknowledging the need for improving cupsys' security we will sit on this forever. (LP: #119289, LP: #129634) - Drop derooting related patches: 06_disable_backend_setuid.dpatch 10_external_pam_helper.dpatch 09_runasuser.dpatch 09_runasuser_autoconf.dpatch - debian/cupsys{,-client}.postinst: Drop the 'cupsys' user setup and file permission juggling. - debian/rules: + Drop --with-cups-user and --enable-privilege-dropping configure options. + Do not modify the upstream default backend permissions. - debian/cupsys.init.d: Do not touch log file permissions any more. - debian/cupsys.files: Drop cups-check-pam-auth. - debian/NEWS: Drop description of derooting changes. - debian/control: Drop adduser dependency. * debian/patches/44_fixconfdirperms.dpatch: Do not create /var/run/cups/certs as lp:lpadmin, but as root:lpadmin, so that cupsd does not need CAP_DAC_OVERRIDE. This will make it possible to create a sensible AppArmor profile. * debian/cupsys.preinst: Fix file permissions on upgrades (owner cupsys -> root). * Add debian/local/apparmor-profile: AppArmor profile for cupsys, to replace the former derooting patches. This uses complain mode for now, until we got some more testing. Install it to /etc/apparmor.d/usr.sbin.cupsd in debian/rules and reload apparmor in debian/cupsys.postinst on configure. Files: a612084c311762aa72bd50a9b473cc3d 343617 raw-translations - cupsys_1.2.12-1ubuntu2_ia64_translations.tar.gz 7cbd4e41385497caceec78256894a082 227504 libs optional libcupsys2_1.2.12-1ubuntu2_ia64.deb c442306b6658555221dc2a90e9bb1319 130354 libs optional libcupsimage2_1.2.12-1ubuntu2_ia64.deb 9ae0fffdcb7ad579a905a57ce6a380a1 2102328 net optional cupsys_1.2.12-1ubuntu2_ia64.deb ec8863642e146ca53b6f0f38597992aa 108780 net optional cupsys-client_1.2.12-1ubuntu2_ia64.deb 30f05fef468f63f41a9399e6562b45e0 195146 libdevel optional libcupsys2-dev_1.2.12-1ubuntu2_ia64.deb d17c3c160c8e14065b7fb1b758fffc89 77952 libdevel optional libcupsimage2-dev_1.2.12-1ubuntu2_ia64.deb 5fa683be5771ffb72fe8094041091ced 46906 net extra cupsys-bsd_1.2.12-1ubuntu2_ia64.deb Original-Maintainer: Debian CUPS Maintainers