Bug#692791: running cupsd as root

2012-11-19 Thread Michael Sweet
I have a fix I am testing that is going through internal review. However, since Apple software engineering is off this week (extension of Thanksgiving holiday) I don't know if I'll have sign-off until next Monday. Will post something as soon as it is available, Sent from my iPad On

Bug#692791: running cupsd as root

2012-11-18 Thread Yves-Alexis Perez
On dim., 2012-11-11 at 17:53 +0100, Didier 'OdyX' Raboud wrote: Hi Michael, Le dimanche, 11 novembre 2012 14.57:05, Michael Sweet a écrit : Lest we forget why we run cupsd as root, here are a few reasons: (…) Thanks for the explanation. As for a proposed fix, I'm thinking we will

Bug#692791: running cupsd as root

2012-11-11 Thread Michael Sweet
All, Lest we forget why we run cupsd as root, here are a few reasons: 1. Authentication (both Kerberos and PAM) 2. Privileged ports for LPD 3. Access to device files for printing 4. Privilege separation from/for filters. 1 and 4 basically require running as root unless we do a hairy mess of

Bug#692791: running cupsd as root

2012-11-11 Thread Didier 'OdyX' Raboud
Hi Michael, Le dimanche, 11 novembre 2012 14.57:05, Michael Sweet a écrit : Lest we forget why we run cupsd as root, here are a few reasons: (…) Thanks for the explanation. As for a proposed fix, I'm thinking we will disable the log file, RequestRoot, ServerRoot, and DocumentRoot directives