Make sure CachDir is only readable by root and lp.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12132 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/scheduler/Makefile b/scheduler/Makefile
index 5e3750c1b2f949296f1fd6bd4027b35afc7c592e..ce1606b1e2d3ac0c5152636b527953aa64494126 100644 (file)
--- a/scheduler/Makefile
+++ b/scheduler/Makefile
@@ -171,7 +171,7 @@ install-data:
        echo Creating $(REQUESTS)/tmp...
        $(INSTALL_DIR) -m 1770 -g $(CUPS_GROUP) $(REQUESTS)/tmp
        echo Creating $(CACHEDIR)...
-       $(INSTALL_DIR) -m 775 -g $(CUPS_GROUP) $(CACHEDIR)
+       $(INSTALL_DIR) -m 770 -g $(CUPS_GROUP) $(CACHEDIR)
        if test "x$(INITDIR)" != x; then \
                echo Installing init scripts...; \
                $(INSTALL_DIR) -m 755 $(BUILDROOT)$(INITDIR)/init.d; \

diff --git a/scheduler/conf.c b/scheduler/conf.c
index 529900084b574b46a0cb385aea9142ba91ed9cee..905bbd11a32a5152aee0d156b855d324526e69da 100644 (file)
--- a/scheduler/conf.c
+++ b/scheduler/conf.c
@@ -1076,7 +1076,7 @@ cupsdReadConfiguration(void)
 
   if ((cupsdCheckPermissions(RequestRoot, NULL, 0710, RunUser,
                             Group, 1, 1) < 0 ||
-       cupsdCheckPermissions(CacheDir, NULL, 0775, RunUser,
+       cupsdCheckPermissions(CacheDir, NULL, 0770, RunUser,
                             Group, 1, 1) < 0 ||
        cupsdCheckPermissions(temp, NULL, 0775, RunUser,
                             Group, 1, 1) < 0 ||