[Pkg-cups-devel] r622 - in cupsys/branches/cups-1.2-ubuntu: . debian debian/local

Martin Pitt mpitt at alioth.debian.org
Wed Nov 28 11:11:13 UTC 2007


Author: mpitt
Date: Wed Nov 28 11:11:13 2007
New Revision: 622

Log:
  - Allow unconfined execution of the bluetooth backend. AppArmor currently
    forbids creation of bluetooth sockets without providing a profile option
    to allow it (see bug #172534). (LP: #147800)

Modified:
   cupsys/branches/cups-1.2-ubuntu/   (props changed)
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Wed Nov 28 11:11:13 2007
@@ -3,8 +3,11 @@
   * debian/local/apparmor-profile:
     - Allow rw access to /dev/parport* and ro access to
       /proc/sys/dev/parport/**, so that parallel port printer detection works.
+    - Allow unconfined execution of the bluetooth backend. AppArmor currently
+      forbids creation of bluetooth sockets without providing a profile option
+      to allow it (see bug #172534). (LP: #147800)
 
- -- Martin Pitt <martin.pitt at ubuntu.com>  Wed, 28 Nov 2007 10:37:47 +0100
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Wed, 28 Nov 2007 11:25:33 +0100
 
 cupsys (1.3.4-1ubuntu2) hardy; urgency=low
 

Modified: cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/local/apparmor-profile	Wed Nov 28 11:11:13 2007
@@ -57,6 +57,9 @@
   # we treat cups-pdf specially, since it needs to write into /home
   # and thus needs extra paranoia
   /usr/lib/cups/backend/cups-pdf Px,
+  # AA blocks creation of bluetooth sockets without providing a way to
+  # allow them (see LP #172534)
+  /usr/lib/cups/backend/bluetooth Ux,
   /usr/lib/cups/cgi-bin/* ixr,
   /usr/lib/cups/daemon/* ixr,
   /usr/lib/cups/driver/* ixr,



More information about the Pkg-cups-devel mailing list