On Wed, 2012-01-04 at 09:51 -0800, Steve Beattie wrote: > On Tue, Jan 03, 2012 at 06:13:39PM -0600, Jamie Strandboge wrote: > > Author: Jamie Strandboge <[email protected]> > > Description: allow read of @{HOME}/.cups/client.conf > > Bug-Ubuntu: https://launchpad.net/bugs/887992 > > > > Index: apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client > > =================================================================== > > --- apparmor-2.7.0.orig/profiles/apparmor.d/abstractions/cups-client > > 2011-07-14 07:57:57.000000000 -0500 > > +++ apparmor-2.7.0/profiles/apparmor.d/abstractions/cups-client > > 2012-01-03 13:49:43.000000000 -0600 > > @@ -1,7 +1,7 @@ > > # vim:syntax=apparmor > > # ------------------------------------------------------------------ > > # > > -# Copyright (C) 2009 Canonical Ltd. > > +# Copyright (C) 2009-2012 Canonical Ltd. > > # > > # This program is free software; you can redistribute it and/or > > # modify it under the terms of version 2 of the GNU General Public > > @@ -13,3 +13,5 @@ > > /etc/cups/client.conf r, > > # client should be able to talk the local cupsd > > /{,var/}run/cups/cups.sock w, > > + # client should be able to read user-specified cups configuration > > + @{HOME}/.cups/client.conf r, > > A couple of questions: > > Should this have the owner attribute?
Yes, I think that is a good addition.
> Also, while trying to track down what information is stored in the
> client.conf file, I discovered that I have a ~/.cups/lpoptions file
> which contains my default printer. I suspect both /etc/cups/lpoptions
> and @{HOME}/.cups/lpoptions should be added to the abstraction as well.
Agreed.
--
Jamie Strandboge | http://www.canonical.com
signature.asc
Description: This is a digitally signed message part
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
