cupsys 1.2.5-1ubuntu1 source package in Ubuntu

Changelog

cupsys (1.2.5-1ubuntu1) feisty; urgency=low

  * Merge to Debian svn head. Remaining Ubuntu changes:
    - Snakeoil SSL cert support:
      + debian/control: Add ssl-cert dependency.
      + debian/cupsys.postinst: Symlink snakeoil SSL certificate if present.
    - TearDown (fast shutdown):
      + debian/control: Add sysv-rc (>= 2.86.ds1-14.1ubuntu2) dependency.
      + debian/cupsys.postinst: Remove obsolete rc.d links.
      + debian/rules: Use 'multiuser' update-rc.d mode.
    - debian/control: Drop libcupsys2-gnutls10 and cupsys-dbg packages.
    - Run cupsd as system user 'cupsd' instead of root to confine impact of
      security vulnerabilities:
      + cupsys{,-client}.postinst: Set up cupsys user and put it into the
        appropriate groups.
      + debian/cupsys.init.d: Set up proper permissions of log files.
      + debian/cupsys.init.d: Disable 'reload', force-reload does restart,
        since cupsd cannot reload as non-root.
      + debian/cupsys.logrotate: Own the log files to cupsys:lpadmin.
      + Add debian/patches/ubuntu-external-pam-helper.dpatch: Helper program
        cups-check-pam-auth which performs PAM authentication and returns the
        status as exit code.
      + debian/cupsys.files: Install cups-check-pam-auth.
      + debian/cupsys.postinst: Set permissions of cups-check-pam-auth to
        cupsys:shadow 2754.
      + debian/rules: Configure with --enable-privilege-dropping.
      + debian/rules: Install lpd backend suid root so that it can bind to a
        privileged port.
    - Support user-installed PPDs:
      - debian/cupsys.dirs: Add usr/share/ppd/custom.
      - debian/cupsys.init.d: Set up this dir as root:lpadmin 03775.
    - debian/patches/14_dont_force_ssl.dpatch: Do not require SSL for the web
      frontend since gnome-cups-manager does not cope with that.
    - debian/patches/58_cupsd.conf-AllowLocal.dpatch: Allow access to local
      ethernet by default. This just affects the ACL, for actually enabling
      access cupsd needs to be switched to not only listen on localhost. (So
      this does not need to be configured in two different places).
    - debian/patches/ubuntu-default-error-policy-retry-job.dpatch: Retry a
      failed job instead of stopping the print queue.
    - debian/patches/ubuntu-disable-browsing.dpatch: Disable browsing by
      default.

cupsys (1.2.5-2) UNRELEASED; urgency=low

  [ Kenshi Muto ]
  * 00_r6068: Apply SVN r6068.

cupsys (1.2.5-1) unstable; urgency=medium

  * New upstream release.

  [ Kenshi Muto ]
  * 00_r6052: Apply SVN r6052 to pass the compile with libpaper.
  * provides /etc/pam.d/cupsys correctly. (closes: #392142)
    (renamed debian/pam to debian/cupsys.pam)
  * fixed "ppd API fails to discover printer nickname and options"
    problem" by upstream (closes: #394255)

 -- Martin Pitt <email address hidden>   Fri,  3 Nov 2006 11:15:14 +0100