Bug 10985 - CUPS runtime UID/GID conflict with systemd/dbus
Summary: CUPS runtime UID/GID conflict with systemd/dbus
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords: Triaged
Depends on:
Blocks:
 
Reported: 2013-08-12 15:51 CEST by Frank Griffin
Modified: 2013-11-17 19:30 CET (History)
4 users (show)

See Also:
Source RPM: cups
CVE:
Status comment:


Attachments

Description Frank Griffin 2013-08-12 15:51:16 CEST
Per a discussion in the ML:

The systemd dbus scripts that handle USB device creation are creating rinters as root:lp per upstream preference with perms rw-rw-r--.  Unfortunately, cups and its subtasks (like hpcups) are running as lp:?? (lp:sys, I think), and the combination means that the device is not writable to cups.

If the device (/dev/bus/usb/xxx/yyy) is changed to lp:sys, everything flows smoothly, ubt if the systemd stuff is correct, then it's cups that needs to change to run in the lp group rather than whatever it is running as now.

Reproducible: 

Steps to Reproduce:
Manuel Hiebel 2013-08-12 19:51:04 CEST

Keywords: (none) => Triaged
CC: (none) => mageia, mageia, thierry.vignaud, tmb

Comment 1 Thierry Vignaud 2013-08-21 20:01:42 CEST
Please try latest package
Comment 2 Frank Griffin 2013-08-22 14:54:07 CEST
Seems fixed, thanks !

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 3 Olivier Blin 2013-11-17 19:29:21 CET
This should now be fixed for real.
cups helpers are still running as the lp user, so we really need to give the lp user access to USB printing devices.

Here is a list of changes I did in the cups package:
- add back udev rule to fix perms of USB devices for cups helpers like hplip
- run udev lp user fix for bus/usb device too, not just usb/lp0
- run udev lp user fix on normal device, not parent, and merge with parport rule
- install lp user fix udev rule after 73-seat-late.rules since the uaccess helper resets ACLs
Comment 4 Olivier Blin 2013-11-17 19:30:18 CET
Fixed in cups-1.7.0-3.mga4

Note You need to log in before you can comment on or make changes to this bug.