[apparmor] [PATCH] allow read of @{HOME}/.cups/client.conf

[Jamie Strandboge]

On Wed, 2012-01-04 at 09:51 -0800, Steve Beattie wrote:
> On Tue, Jan 03, 2012 at 06:13:39PM -0600, Jamie Strandboge wrote:
> > Author: Jamie Strandboge <jamie at canonical.com>
> > Description: allow read of @{HOME}/.cups/client.conf
> > Bug-Ubuntu: https://launchpad.net/bugs/887992
> > 
> > Index: apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client
> > ===================================================================
> > --- apparmor-2.7.0.orig/profiles/apparmor.d/abstractions/cups-client	2011-07-14 07:57:57.000000000 -0500
> > +++ apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client	2012-01-03 13:49:43.000000000 -0600
> > @@ -1,7 +1,7 @@
> >  # vim:syntax=apparmor
> >  # ------------------------------------------------------------------
> >  #
> > -#    Copyright (C) 2009 Canonical Ltd.
> > +#    Copyright (C) 2009-2012 Canonical Ltd.
> >  #
> >  #    This program is free software; you can redistribute it and/or
> >  #    modify it under the terms of version 2 of the GNU General Public
> > @@ -13,3 +13,5 @@
> >    /etc/cups/client.conf   r,
> >    # client should be able to talk the local cupsd
> >    /{,var/}run/cups/cups.sock w,
> > +  # client should be able to read user-specified cups configuration
> > +  @{HOME}/.cups/client.conf r,
> 
> A couple of questions:
> 
> Should this have the owner attribute?

Yes, I think that is a good addition.

> Also, while trying to track down what information is stored in the
> client.conf file, I discovered that I have a ~/.cups/lpoptions file
> which contains my default printer. I suspect both /etc/cups/lpoptions
> and @{HOME}/.cups/lpoptions should be added to the abstraction as well.

Agreed.

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120106/24b1ad0d/attachment.pgp>