From 0a393e6a404e549033cf21268e7821a14813fd56 Mon Sep 17 00:00:00 2001 From: msweet Date: Fri, 28 Mar 2014 21:03:43 +0000 Subject: [PATCH] Allow backends to have group read + execute permissions and still run as root (STR #2935) git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11782 a1ca3aef-8c08-0410-bb20-df032aa958be --- CHANGES.txt | 2 ++ scheduler/cups-deviced.c | 3 +-- scheduler/job.c | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/CHANGES.txt b/CHANGES.txt index 7052120d9..bb17aaed4 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -29,3 +29,5 @@ CHANGES IN CUPS V2.0b1 () - The scheduler now uses to close the default printer definition in printers.conf (STR #4153) + - The scheduler now allows run-as-root backends to have group read and + execute permissions (STR #2935) diff --git a/scheduler/cups-deviced.c b/scheduler/cups-deviced.c index 2127937f2..73e93da0b 100644 --- a/scheduler/cups-deviced.c +++ b/scheduler/cups-deviced.c @@ -270,8 +270,7 @@ main(int argc, /* I - Number of command-line args */ * all others run as the unprivileged user... */ - start_backend(dent->filename, - !(dent->fileinfo.st_mode & (S_IRWXG | S_IRWXO))); + start_backend(dent->filename, !(dent->fileinfo.st_mode & (S_IWGRP | S_IRWXO))); } cupsDirClose(dir); diff --git a/scheduler/job.c b/scheduler/job.c index 0c5d7da00..7da655099 100644 --- a/scheduler/job.c +++ b/scheduler/job.c @@ -1233,7 +1233,7 @@ cupsdContinueJob(cupsd_job_t *job) /* I - Job */ else if (stat(command, &backinfo)) backroot = 0; else - backroot = !(backinfo.st_mode & (S_IRWXG | S_IRWXO)); + backroot = !(backinfo.st_mode & (S_IWGRP | S_IRWXO)); argv[0] = job->printer->sanitized_device_uri; -- 2.39.2