[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1006183: marked as done (cups-browsed: Provide apparmor rule for cups-browsed-debian-edu.conf as shipped on Debian Edu systems)



Your message dated Mon, 21 Feb 2022 23:04:07 +0000
with message-id <E1nMHix-000Iej-Tr@fasolo.debian.org>
and subject line Bug#1006183: fixed in cups-filters 1.28.12-1
has caused the Debian Bug report #1006183,
regarding cups-browsed: Provide apparmor rule for cups-browsed-debian-edu.conf as shipped on Debian Edu systems
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1006183: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006183
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: cups-browsed
Severity: wishlist
Version: 1.28.11-2
Control: found -1 2.3.3op2-3+deb11u1
X-Debbugs-Cc: debian-edu@lists.debian.org
User: debian-edu@lists.debian.org
Usertags: debian-edu
Tags: patch

Dear CUPS maintainers,

on Debian Edu we face a problem with /etc/apparmor.d/usr.sbin.cups-browsed as shipped in cups-browsed bin:pkg (see [1] for details). The problem is specific to Debian Edu, but it would be really cool to get the most appropriate fix for this into bin:pkg cups-browsed itself.

The problem: in Debian Edu, we move /etc/cups/cups-browsed.conf out of the way and replace it by a symlink that points to /etc/cups/cups-browsed-debian-edu.conf. In Debian Edu, we do this for several files in /etc/ when provisioning an adjusted Debian Edu server or workstation. Unfortunately, since Debian Edu 11, the file /etc/cups/cups-browsed-debian-edu.conf does not get read anymore due to apparmor denying this file from being read.

The request that we ask form the printing team is this: Can you please allow cups-browsed to read from /etc/cups/cups-browsed-debian-edu.conf? A patch for this is attached to this bug report.

Of course, the conffile manipulation approach in Debian Edu is debatable, but shall not be our concern in this bug. (See #311188 if you want to chime in on that topic).

Thanks+Greets,
Mike


[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1005813
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net

diff -Nru cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed
--- cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed	2022-01-22 12:19:51.000000000 +0100
+++ cups-filters-1.28.11/debian/apparmor/usr.sbin.cups-browsed	2022-02-20 19:51:07.000000000 +0100
@@ -17,6 +17,9 @@
   /var/log/cups/* rw,
   /tmp/** rw,
 
+  # Courtesy to the Debian Edu team...
+  /etc/cups/cups-browsed-debian-edu.conf r,
+
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.cups-browsed>
 }
diff -Nru cups-filters-1.28.11/debian/changelog cups-filters-1.28.11/debian/changelog
--- cups-filters-1.28.11/debian/changelog	2022-01-22 12:19:51.000000000 +0100
+++ cups-filters-1.28.11/debian/changelog	2022-02-20 19:51:15.000000000 +0100
@@ -1,3 +1,12 @@
+cups-filters (1.28.11-2.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * debian/apparmor/usr.sbin.cups-browsed: Allow reading from Debian Edu's
+    cups-browsed config file (/etc/cups/cups-browsed-debian-edu.conf).
+    (Closes: -1).
+
+ -- Mike Gabriel <sunweaver@debian.org>  Sun, 20 Feb 2022 19:51:15 +0100
+
 cups-filters (1.28.11-2) unstable; urgency=medium
 
   * debian/control: lynx has to be handled different in Debian and Ubuntu

Attachment: pgp5GFtn7WnG3.pgp
Description: Digitale PGP-Signatur


--- End Message ---
--- Begin Message ---
Source: cups-filters
Source-Version: 1.28.12-1
Done: Thorsten Alteholz <debian@alteholz.de>

We believe that the bug you reported is fixed in the latest version of
cups-filters, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1006183@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thorsten Alteholz <debian@alteholz.de> (supplier of updated cups-filters package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 21 Feb 2022 19:42:22 +0100
Source: cups-filters
Architecture: source
Version: 1.28.12-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1006183
Changes:
 cups-filters (1.28.12-1) unstable; urgency=medium
 .
   * Update to new upstream version 1.28.12.
   * debian/apparmor/usr.sbin.cups-browsed: Allow reading from Debian Edu's
     cups-browsed config file (/etc/cups/cups-browsed-debian-edu.conf).
     (Closes: #1006183). (patch provided by Mike Gabriel)
Checksums-Sha1:
 09d16fdbb4ebc35941d6c190ada59170db301a08 2968 cups-filters_1.28.12-1.dsc
 ab003e4b8d7ae17f38cb91301e8e3cae1705fc73 1505868 cups-filters_1.28.12.orig.tar.xz
 3ced8921ee32b5f98686d5392bbbbf6c9e1bce87 83492 cups-filters_1.28.12-1.debian.tar.xz
 47a26fc79a6ed7d505cd902fa91d78dd48485692 13371 cups-filters_1.28.12-1_amd64.buildinfo
Checksums-Sha256:
 4fdd7e89dd342e7b92e5ae6a86c5713cd3ed4e210669c0ce0b48d62480a4ee92 2968 cups-filters_1.28.12-1.dsc
 46e2ea3d884ad222bb863ce6511e59cf390ef8e835295be44a80e500b2a33a3a 1505868 cups-filters_1.28.12.orig.tar.xz
 0c1b123f3294207b598fcd6fbd9193c956c520188bafb6840f2f03d4c2a70ff9 83492 cups-filters_1.28.12-1.debian.tar.xz
 6baef4314cabf68aacf7b8781ca59d5e16d314739641c3940e5059a7011ca0a9 13371 cups-filters_1.28.12-1_amd64.buildinfo
Files:
 dd66c5af31eeda2e9369d1184b2ffab7 2968 net optional cups-filters_1.28.12-1.dsc
 5b5833ce10087b5fbb53f4a45a3b7372 1505868 net optional cups-filters_1.28.12.orig.tar.xz
 c844a0c13146f0fecfb37049dea72a20 83492 net optional cups-filters_1.28.12-1.debian.tar.xz
 776e43b8d68e49662ed95835051da930 13371 net optional cups-filters_1.28.12-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmIUF8JfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR9QhD/9sqNQSSJt10g3Fpj/Q+WsDZEMWZuHd
Fd0DNbVgTNle1TbwLlKkpF+pN7DPpW4O44jvZOuIufd3BzMk/WsAyVRcs/IfjU+f
ZPYP99OtdH6bR3/YnnBEpxDfceUnML1YdVWtvwUiez16DtaSP/6YmgaNJaVOM+jc
u32T/R+XXSQHAjbTBDX5yeA7aW36kQpaYSI9/megdd8pAR38I0SMxAiobnC6FDq+
JPUdV5+yeDBBvfL8yi86wKCIRdppSBHqdN0iiXZYVrfozx3u7Kj437S62ffoPZsx
qXvMpJPvNBzs6Pt4oCJmeU29hGa1GU0EzCZtuyWRIugbmRQnuHMEN8DNeCPHmKLM
+FoFN33qiJi4IBt0VLopehwx4ErBbcB30PMPdTnQhW2ate8KUyqIkPYjv1BxKLul
UpWJddQjUeBFY57VBPrK/2x8sz60YB+ciPVZAdDMvVqNGYKl2Yji4PmfF5a8g6uB
TTPikFgKb4CtvG1pz6vw0045pV/dEiJQiP8/OVM2dtlgExsqHNEijbNhkYph2Sk5
LDtm8pDU033N30GWV7lvzaUr5AxJacNYIRsef03kiaTPlljnDJCSDb3v2CGVt4u0
DDnHxHevLy7evewQeNGDg0R0bwGae2uey7MAUEBv1Nw7PlfGRDPAm5272E1o8QwW
c/MCvosRL9uxGQ==
=qGFM
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: