This all is not new. From the git history, LP: #345953 got fixed by the inclusion of the current (and mostly unchanged) of the logfiles_adm_readable.dpatch by Martin for 1.3.9-16. The logrotate script exists at least since cups 1.2. It has enforced "640 root lp" since 1.3.8-1.
That said, I open to fixing this. I agree with mode 0640 but my only doubt is whether the group 'adm' is okay, rather than lpadmin. Users are not necessarily in both groups; therefore "adm" is the generic solution but could potentially forbid "lpadmin" users logfiles access (which, at a second thought, is probably fine). Therefore: * cups should be creating the logfiles 640 root:adm * logrotate should only let them be recreated that way too. Opinions about the attached patch? Cheers, OdyX ** Patch added: "0001-Consolidate-logfiles-modes-and-groups-to-be-0640-and.patch" https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1268011/+attachment/3946225/+files/0001-Consolidate-logfiles-modes-and-groups-to-be-0640-and.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1268011 Title: Inconsistent ownership/permissions of error_log in CUPS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1268011/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
