Bug#881619: /etc/cups/cups-files.conf: cannot job-edit as root: root missing from SystemGroup

[Alban Browaeys <prahal@yahoo.com>]

Package: cups-daemon
Version: 2.2.6-2
Severity: normal
File: /etc/cups/cups-files.conf

Dear Maintainer,
per the man page root should be in cups-files.conf SystemGroup.
JobPrivateAccess requires @SYSTEM or @OWNER but root in not in any of
those. Thus root cannot job-edit (cancel jobs)
This forbid cups-pk-helper from cancelling jobs as it run as root.

A workaround is adding "root" to "SystemGroup" (which includes
only lpadmin on debian).
We might want to include more following man page which tells:
 The default contains "admin", "lpadmin", "root", "sys", and/or "system".


This affect cups >= 1.5 since the introduction of "private job values".

One such consumer of cups-pk-helper is gnome-control-center printer
panel.


Best regards,
Alban


-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-rc7prahal+intel+ (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages cups-daemon depends on:
ii  adduser           3.116
ii  bc                1.06.95-9+b3
ii  dpkg              1.19.0.4
ii  libavahi-client3  0.7-3
ii  libavahi-common3  0.7-3
ii  libc6             2.24-17
ii  libcups2          2.2.6-2
ii  libcupsmime1      2.2.6-2
ii  libdbus-1-3       1.12.0-1
ii  libgssapi-krb5-2  1.15.2-2
ii  libpam0g          1.1.8-3.6
ii  libpaper1         1.1.24+nmu5
ii  libsystemd0       235-2
ii  lsb-base          9.20170808
ii  procps            2:3.3.12-3
ii  ssl-cert          1.0.39

Versions of packages cups-daemon recommends:
ii  avahi-daemon  0.7-3
ii  colord        1.3.3-2
ii  cups-browsed  1.17.9-1

Versions of packages cups-daemon suggests:
ii  cups                                       2.2.6-2
ii  cups-bsd                                   2.2.6-2
ii  cups-client                                2.2.6-2
ii  cups-common                                2.2.6-2
ii  cups-filters [foomatic-filters]            1.17.9-1
ii  cups-ppdc                                  2.2.6-2
ii  cups-server-common                         2.2.6-2
ii  foomatic-db-compressed-ppds [foomatic-db]  20171012-1
ii  ghostscript                                9.22~dfsg-1
ii  hplip                                      3.17.10+repack0-1
ii  poppler-utils                              0.57.0-2
ii  printer-driver-cups-pdf [cups-pdf]         3.0.1-4
ii  printer-driver-gutenprint                  5.2.13-1
ii  printer-driver-hpcups                      3.17.10+repack0-1
ii  smbclient                                  2:4.7.1+dfsg-1
ii  udev                                       235-2

-- no debconf information