Dear Martin-Eric, > ... We already call -dSAFER and drop privileges early, so we're > already protected as it is. Closing.
Sorry, you seem to misunderstand: this bug is (more-or-less) about the need to use the -P- also, as well as -dSAFER, to be protected. Is cups-pdf "part of" cups? In that case you may be "safe" because of chdir("/"), see http://bugs.debian.org/584002 . Thanks, Paul Paul Szabo p...@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org