Accepted cupsys 1.2.12-1ubuntu2 (source)

[Martin Pitt]

Accepted:
 OK: cupsys_1.2.12.orig.tar.gz
 OK: cupsys_1.2.12-1ubuntu2.diff.gz
 OK: cupsys_1.2.12-1ubuntu2.dsc
     -> Component: main Section: net

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 02 Aug 2007 14:06:05 +0200
Source: cupsys
Binary: libcupsys2-dev cupsys libcupsys2 libcupsimage2 cupsys-common cupsys-client cupsys-bsd libcupsimage2-dev
Architecture: source
Version: 1.2.12-1ubuntu2
Distribution: gutsy
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 cupsys     - Common UNIX Printing System(tm) - server
 cupsys-bsd - Common UNIX Printing System(tm) - BSD commands
 cupsys-client - Common UNIX Printing System(tm) - client programs (SysV)
 cupsys-common - Common UNIX Printing System(tm) - common files
 libcupsimage2 - Common UNIX Printing System(tm) - image libs
 libcupsimage2-dev - Common UNIX Printing System(tm) - image development files
 libcupsys2 - Common UNIX Printing System(tm) - libs
 libcupsys2-dev - Common UNIX Printing System(tm) - development files
Launchpad-Bugs-Fixed: 119289 129634
Changes: 
 cupsys (1.2.12-1ubuntu2) gutsy; urgency=low
 .
   * Drop our derooting changes. It still has some regressions, and with
     upstream not even acknowledging the need for improving cupsys' security we
     will sit on this forever. (LP: #119289, LP: #129634)
     - Drop derooting related patches:
       06_disable_backend_setuid.dpatch
       10_external_pam_helper.dpatch
       09_runasuser.dpatch
       09_runasuser_autoconf.dpatch
     - debian/cupsys{,-client}.postinst: Drop the 'cupsys' user setup and file
       permission juggling.
     - debian/rules:
       + Drop --with-cups-user and --enable-privilege-dropping configure
         options.
       + Do not modify the upstream default backend permissions.
     - debian/cupsys.init.d: Do not touch log file permissions any more.
     - debian/cupsys.files: Drop cups-check-pam-auth.
     - debian/NEWS: Drop description of derooting changes.
     - debian/control: Drop adduser dependency.
   * debian/patches/44_fixconfdirperms.dpatch: Do not create
     /var/run/cups/certs as lp:lpadmin, but as root:lpadmin, so that cupsd
     does not need CAP_DAC_OVERRIDE. This will make it possible to create a
     sensible AppArmor profile.
   * debian/cupsys.preinst: Fix file permissions on upgrades (owner cupsys ->
     root).
   * Add debian/local/apparmor-profile: AppArmor profile for cupsys, to replace
     the former derooting patches. This uses complain mode for now, until we
     got some more testing. Install it to /etc/apparmor.d/usr.sbin.cupsd in
     debian/rules and reload apparmor in debian/cupsys.postinst on configure.
Files: 
 90fa6771022469f2a9bdfeff8a8d78fe 1174 net optional cupsys_1.2.12-1ubuntu2.dsc
 034bd1288a6cfe188784a308af4e262d 112531 net optional cupsys_1.2.12-1ubuntu2.diff.gz
Original-Maintainer: Debian CUPS Maintainers <pkg-cups-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGscpPDecnbV4Fd/IRAtpBAKCBEEfEU+MuZsRx5Id5AcdUMchplgCePttm
opzGkooYJodPCNLxEGW0xys=
=XNi0
-----END PGP SIGNATURE-----