<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Didier,<div><br><div><div>On 2012-11-28, at 6:58 AM, Didier 'OdyX' Raboud <<a href="mailto:odyx@debian.org">odyx@debian.org</a>> wrote:</div><blockquote type="cite"><font color="#000000">...</font><br>DocumentRoot has to be fixed that way IMHO as the attack is immediate and I <br>think it's a suitable fix for our stable releases. For SystemGroup, I think <br>it's reasonably okay to leave that bug open for stable releases; the long-term <br>fix (to push that to cups-files.conf) is okay in that regard.<br><br>Any idea/patch on how you'd enforce default DocumentRoot (including making <br>sure the tests still run? )?<br></blockquote></div><div><br></div>One simple check: if we are running as root, require the defaults.</div><div><br><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">________________________________________________________________________<br>Michael Sweet, Senior Printing System Engineer, PWG Chair<br></span>
</div>
<br></div></body></html>