[apparmor] [PATCH] allow read of @{HOME}/.cups/client.conf

[Steve Beattie]

On Tue, Jan 03, 2012 at 06:13:39PM -0600, Jamie Strandboge wrote:
> Author: Jamie Strandboge <jamie at canonical.com>
> Description: allow read of @{HOME}/.cups/client.conf
> Bug-Ubuntu: https://launchpad.net/bugs/887992
> 
> Index: apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client
> ===================================================================
> --- apparmor-2.7.0.orig/profiles/apparmor.d/abstractions/cups-client	2011-07-14 07:57:57.000000000 -0500
> +++ apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client	2012-01-03 13:49:43.000000000 -0600
> @@ -1,7 +1,7 @@
>  # vim:syntax=apparmor
>  # ------------------------------------------------------------------
>  #
> -#    Copyright (C) 2009 Canonical Ltd.
> +#    Copyright (C) 2009-2012 Canonical Ltd.
>  #
>  #    This program is free software; you can redistribute it and/or
>  #    modify it under the terms of version 2 of the GNU General Public
> @@ -13,3 +13,5 @@
>    /etc/cups/client.conf   r,
>    # client should be able to talk the local cupsd
>    /{,var/}run/cups/cups.sock w,
> +  # client should be able to read user-specified cups configuration
> +  @{HOME}/.cups/client.conf r,

A couple of questions:

Should this have the owner attribute?

Also, while trying to track down what information is stored in the
client.conf file, I discovered that I have a ~/.cups/lpoptions file
which contains my default printer. I suspect both /etc/cups/lpoptions
and @{HOME}/.cups/lpoptions should be added to the abstraction as well.

Thanks.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120104/67a73311/attachment-0001.pgp>