See Mike's comment and my last comment in

http://www.cups.org/str.php?L2438

I have looked into the patches of the Ubuntu CUPS package and the
relevant patch (8 KB) is attached. The patch separates the verification
of the credentials into an external program which runs SUID root (as
CUPS runs as user in Ubuntu). Username and password are sent via a pipe
to the standard input of the external program (newly introduced function
"cupsdCallPamAuthHelper()"). It seems that this pipe is not correctly
closed.

The patch is one of Martin Pitt's non-root mode patches, therefore
assigning to Martin Pitt.


** Changed in: cupsys (Ubuntu)
   Importance: Medium => High
     Assignee: (unassigned) => Martin Pitt

** Attachment added: "Patch to move authentication into external SUID root 
program"
   http://launchpadlibrarian.net/8410429/10_external_pam_helper.dpatch

-- 
MASTER [Feisty] cupsd leaking file descriptors (was: Multiple jobs are not 
printed)
https://bugs.launchpad.net/bugs/112803
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to